CVE-2001-0969 ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
HighCVSS 10.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ipfw in FreeBSD does not properly handle the use of "me" in its rules when point to point interfaces are used, which causes ipfw to allow connections from arbitrary remote hosts.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freebsd | = 4.3 | No fix listed |
References
- 1937 vdb-entry
- 3206 patch vdb-entry vendor-advisory
- ipfw-me-unauthorized-access(7002) vdb-entry