Vulnerability in Freebsd

CVE-2001-0183

ipfw and ip6fw in FreeBSD 4.2 and earlier allows remote attackers to bypass access restrictions by setting the ECE flag in a TCP packet, which makes the packet appear to be part of an established connection.

EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.

Affected products

Freebsd — versions 3.0, 3.1, 3.3
N/a — versions n/a

References

cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)