Main
Vulnerability Database
Exploits
ID:10834 - Exploit for Improper access control in Linux kernel - CVE-2001-0405
ID:10834 - Exploit for Improper access control in Linux kernel - CVE-2001-0405
Published: November 7, 2024
Vulnerability identifier: #VU100008
Vulnerability risk: Low
CVE-ID: CVE-2001-0405
CWE-ID: CWE-284
Exploitation vector: Remote access
Vulnerable software:
Linux kernel
Linux kernel
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.
Remediation
Install update from vendor's repository.