CVE-2001-0405

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP address and port number, which is added to the RELATED table and allowed by the firewall.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.htmlExploit, Patch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3
http://www.redhat.com/support/errata/RHSA-2001-052.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-084.html
http://www.securityfocus.com/bid/2602Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6390
http://archives.neohapsis.com/archives/bugtraq/2001-04/0271.htmlExploit, Patch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-071.php3
http://www.redhat.com/support/errata/RHSA-2001-052.htmlVendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-084.html
http://www.securityfocus.com/bid/2602Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6390

Timeline

Published: Jul 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04062.1Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using (1) a printer queue query, (2) the more co CVE-2001-04074.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a dat CVE-2001-04085.1vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when anoth CVE-2001-04092.1vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi CVE-2001-04107.5Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c CVE-2001-04115.0Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant CVE-2001-04127.2Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode CVE-2001-04135.0BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau CVE-2001-041410.0Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib CVE-2001-04154.6REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce CVE-2001-04162.1sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar CVE-2001-04172.1Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.