Skip to content

CVE-2001-1155 TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass i...

CriticalCVSS 9.8 EPSS 2.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.

Affected products

ProductAffected versionsFixed in
freebsd >= 4.1.1, <= 4.3 No fix listed

References

  • 5454 broken-link vdb-entry