CVE-2004-1799 Information

Description

PF in certain OpenBSD versions when stateful filtering is enabled does not limit packets for a session to the original interface which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.

Reference

http://marc.info/?l=full-disclosure&m=107331321302113&w=2 http://www.osvdb.org/19105 http://www.securityfocus.com/bid/9362

Share on: