CVE-2005-2317 Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC addr...
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| shorewall | = 2.0.0 | No fix listed |
| shorewall | = 2.0.0a | No fix listed |
| shorewall | = 2.0.0b | No fix listed |
| shorewall | = 2.0.1 | No fix listed |
| shorewall | = 2.0.2 | No fix listed |
| shorewall | = 2.0.2a | No fix listed |
| shorewall | = 2.0.2b | No fix listed |
| shorewall | = 2.0.2c | No fix listed |
| shorewall | = 2.0.2d | No fix listed |
| shorewall | = 2.0.2e | No fix listed |
| shorewall | = 2.0.2f | No fix listed |
| shorewall | = 2.0.3 | No fix listed |
| shorewall | = 2.0.3a | No fix listed |
| shorewall | = 2.0.3b | No fix listed |
| shorewall | = 2.0.3c | No fix listed |
| shorewall | = 2.0.4 | No fix listed |
| shorewall | = 2.0.5 | No fix listed |
| shorewall | = 2.0.6 | No fix listed |
| shorewall | = 2.0.7 | No fix listed |
| shorewall | = 2.0.8 | No fix listed |
| shorewall | = 2.0.9 | No fix listed |
| shorewall | = 2.0.10 | No fix listed |
| shorewall | = 2.0.11 | No fix listed |
| shorewall | = 2.0.12 | No fix listed |
| shorewall | = 2.0.13 | No fix listed |
Show 14 more
| Product | Affected versions | Fixed in |
|---|---|---|
| shorewall | = 2.0.14 | No fix listed |
| shorewall | = 2.0.15 | No fix listed |
| shorewall | = 2.0.16 | No fix listed |
| shorewall | = 2.2.0 | No fix listed |
| shorewall | = 2.2.1 | No fix listed |
| shorewall | = 2.2.2 | No fix listed |
| shorewall | = 2.2.3 | No fix listed |
| shorewall | = 2.2.4 | No fix listed |
| shorewall | = 2.4.0 | No fix listed |
| shorewall | = 2.4.0_rc1 | No fix listed |
| shorewall | = 2.4.0_rc2 | No fix listed |
| debian/shorewall(Debian:12) | < 2.4.1-2 | 2.4.1-2 |
| debian/shorewall(Debian:13) | < 2.4.1-2 | 2.4.1-2 |
| debian/shorewall(Debian:14) | < 2.4.1-2 | 2.4.1-2 |
References
- 20050718 Shorewall MACLIST Problem mailing-list patch vendor-advisory
- 16087 patch third-party-advisory vendor-advisory
- 17110 third-party-advisory
- 17113 third-party-advisory
- shorewall.net patch vendor-advisory
- DSA-849 vendor-advisory
- GLSA-200507-20 vendor-advisory
- 14292 vdb-entry
- USN-197-1 vendor-advisory
- Debian Security Tracker CVE-2005-2317 vendor-advisory
- bugs.debian.org issue-tracking