iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.
References
Link Resource
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=50500 Exploit Issue Tracking Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2001-144.html Broken Link
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2002-08-31T04:00:00

Updated: 2002-09-10T09:00:00

Reserved: 2002-08-27T00:00:00


Link: CVE-2001-1387

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2001-11-05T05:00:00.000

Modified: 2024-02-14T15:17:09.183


Link: CVE-2001-1387

JSON object: View

cve-icon Redhat Information

No data.

CWE