|
I was wondering if anyone has seen this vulnerability:
http://www.lwn.net/2001/0419/a/netfilter.php3
Impact: If an attacker can establish an FTP connection passing through a
Linux 2.4.x IPTables firewall with the state options allowing "related"
connections (almost 100% do), he can insert entries into the firewall's
RELATED ruleset table allowing the FTP Server to connect to any host and
port protected by the firewalls rules, including the firewall itself.
There is a patch available:
http://netfilter.samba.org/security-fix/
Is this goin to affect the latest patch?
|
