Unscored severity · published Jul 19, 2005
CVE-2005-2317
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Shorewall · Shorewall
2.0.0; 2.0.0a; 2.0.0b; 2.0.1; 2.0.2; 2.0.2a; +30 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2317
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2317
Patch
http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html
Patch
http://secunia.com/advisories/16087
secunia.com
http://secunia.com/advisories/17110
secunia.com
http://secunia.com/advisories/17113
Patch
http://shorewall.net/News.htm#20050717
www.debian.org
http://www.debian.org/security/2005/dsa-849
More from Shorewall
–
CVE-2004-0647
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file