CVE-2001-1388

Published Nov 5, 2001

Last updated 3 months ago

Overview

Description: iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-770

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netfilter:iptables:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1419F54-6B02-4A7D-AEE1-03E51E97DD43",
            "versionEndExcluding": "1.2.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References