CVE-2001-1388

Published Nov 5, 2001

Last updated 4 years ago

Overview

Description: iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-770

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:netfilter:iptables:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1419F54-6B02-4A7D-AEE1-03E51E97DD43",
            "versionEndExcluding": "1.2.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References