Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

shorewall: rule bypass vulnerability

Package(s):

shorewall

CVE #(s):

CAN-2005-2317

Created:

July 21, 2005

Updated:

October 10, 2005

Description:

Shorewall has a vulnerability in which a client that is accepted by MAC address filtering can bypass other rules, allowing access to all open services on the firewall.

Alerts:

Ubuntu	USN-197-1	2005-10-10
Debian	DSA-849-1	2005-10-08
Gentoo	200507-20:02	2005-07-22
Gentoo	200507-20	2005-07-22
Mandriva	MDKSA-2005:123	2005-07-20

(Log in to post comments)