CVE-2002-2438

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
May 18, 2021
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2002

CVE-2002-24397.8Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.CVE-2002-24435.0schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending rCVE-2002-24449.8Snoopy before 2.0.0 has a security hole in exec cURLCVE-2002-244510.0GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service useCVE-2002-244610.0GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabl