CVE-2000-0289

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-03/0284.htmlExploit, Vendor Advisory
http://www.novell.com/linux/security/advisories/suse_security_announce_48.html
http://www.securityfocus.com/bid/1078Exploit, Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-03/0284.htmlExploit, Vendor Advisory
http://www.novell.com/linux/security/advisories/suse_security_announce_48.html
http://www.securityfocus.com/bid/1078Exploit, Patch, Vendor Advisory

Timeline

Published: Mar 27, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-02905.0Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.CVE-2000-02914.6Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.CVE-2000-02925.0The Adtran MX2800 M13 Multiplexer allows remote attackers to cause a denial of service via a ping flood to the Ethernet interface, which cau CVE-2000-02932.1aaa_base in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names in CVE-2000-02947.2Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.CVE-2000-029510.0Buffer overflow in LCDproc allows remote attackers to gain root privileges via the screen_add command.CVE-2000-02967.2fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.CVE-2000-02976.4Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModera CVE-2000-02987.2The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users dire CVE-2000-02995.0Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP r CVE-2000-030010.0The default encryption method of PcAnywhere 9.x uses weak encryption, which allows remote attackers to sniff and decrypt PcAnywhere or NT do CVE-2000-03015.0Ipswitch IMAIL server 6.02 and earlier allows remote attackers to cause a denial of service via the AUTH CRAM-MD5 command.