CVE-2000-0553

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/1377
http://www.securityfocus.com/bid/1308Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4994
http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.htmlExploit, Patch, Vendor Advisory
http://www.osvdb.org/1377
http://www.securityfocus.com/bid/1308Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/4994

Timeline

Published: May 26, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-05545.0Ceilidh allows remote attackers to obtain the real path of the Ceilidh directory via the translated_path hidden form field.CVE-2000-05555.0Ceilidh allows remote attackers to cause a denial of service via a large number of POST requests.CVE-2000-05565.0Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to th CVE-2000-055710.0Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-055810.0Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARM CVE-2000-05592.1eTrust Intrusion Detection System (formerly SessionWall-3) uses weak encryption (XOR) to store administrative passwords in the registry, whi CVE-2000-05617.5Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.CVE-2000-05627.5BlackIce Defender 2.1 and earlier, and BlackIce Pro 2.0.23 and earlier, do not properly block Back Orifice traffic when the security setting CVE-2000-056310.0The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious w CVE-2000-05645.0The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a CVE-2000-05652.1SmartFTP Daemon 0.2 allows a local user to access arbitrary files by uploading and specifying an alternate user configuration file via a .. CVE-2000-05667.2makewhatis in Linux man package allows local users to overwrite files via a symlink attack.