NVD

Id
53681  
Name
CVE-2007-1497  
Description
nf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during reassembly of fragmented packets, which leaves the default value as IP_CT_ESTABLISHED and might allow remote attackers to bypass certain rulesets using IPv6 fragments.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-03-16  
Modified Date
2011-03-07  
Seq
2007-1497  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271978 53681 CVE-2007-1497 oval:org.mitre.oval:def:10457  View
271979 53681 CVE-2007-1497 DSA-1289  View
271980 53681 CVE-2007-1497 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.20.3  View
271981 53681 CVE-2007-1497 MDKSA-2007:171  View
271982 53681 CVE-2007-1497 MDKSA-2007:196  View
271983 53681 CVE-2007-1497 SUSE-SA:2007:043  View
271984 53681 CVE-2007-1497 RHSA-2007:0347  View
271985 53681 CVE-2007-1497 23976  View
271986 53681 CVE-2007-1497 USN-464-1  View
271987 53681 CVE-2007-1497 ADV-2007-0944  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51723 JVNDB-2007-000386 Linux Kernel の Netfilter における IPv6 フラグメント再構築処理によるルール回避の脆弱性 Linux Kernel の Netfilter における nf_conntrack には、IPv6 フラグメントパケットの再構築処理に不備が存在し、IPv6 フラグメントパケットを不適切に ESTABLISHED として処理するため、フィルタリングルール回避の脆弱性が存在します。 CVE-2007-1497 24852 CVE-2007-1497 53681 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000386.html 2007-03-13 2007-06-01 View