CVE-2002-0704

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-212

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=102088521517722&w=2Mailing List
http://online.securityfocus.com/advisories/4116Broken Link, Third Party Advisory, VDB Entry
http://www.iss.net/security_center/static/9043.phpBroken Link, Patch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-030.phpBroken Link
http://www.redhat.com/support/errata/RHSA-2002-086.htmlBroken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/4699Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
http://marc.info/?l=bugtraq&m=102088521517722&w=2Mailing List
http://online.securityfocus.com/advisories/4116Broken Link, Third Party Advisory, VDB Entry
http://www.iss.net/security_center/static/9043.phpBroken Link, Patch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-030.phpBroken Link
http://www.redhat.com/support/errata/RHSA-2002-086.htmlBroken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/4699Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory

Timeline

Published: Jul 26, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-07057.5The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory CVE-2002-07067.5UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows CVE-2002-07075.0The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large CVE-2002-07085.0Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary f CVE-2002-07097.5SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL CVE-2002-07106.4Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired CVE-2002-07115.0Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a d CVE-2002-07122.1Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which CVE-2002-07137.5Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code CVE-2002-07147.5FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows re CVE-2002-07155.0Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy CVE-2002-07167.2Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers