CVE-2002-1978
N/A
Published: June 28, 2005 at 04:00 AM UTC
Updated: June 16, 2026 at 10:00 PM UTC
1 product affected across 1 vendorIpfilter
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.1.13.1.103.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.93.2.13.2.103.2.113.2.123.2.133.2.143.2.153.2.163.2.173.2.183.2.193.2.23.2.203.2.213.2.223.2.33.2.43.2.53.2.63.2.73.2.83.2.93.3.13.3.103.3.113.3.123.3.133.3.143.3.153.3.163.3.173.3.183.3.193.3.23.3.203.3.213.3.223.3.33.3.43.3.53.3.63.3.73.3.83.3.93.4.13.4.103.4.113.4.123.4.133.4.143.4.153.4.163.4.173.4.183.4.193.4.23.4.203.4.213.4.223.4.233.4.243.4.253.4.263.4.273.4.283.4.33.4.43.4.53.4.63.4.73.4.83.4.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
Vendor Advisoryx_refsource_NETBSD
Source: [email protected]
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-024.txt.ascVDB Entryx_refsource_XFPatch
Source: [email protected]
http://www.iss.net/security_center/static/10409.phpThird Party Advisoryx_refsource_CERT-VNUS Government Resource
Source: [email protected]
http://www.kb.cert.org/vuls/id/328867Quick Info
StatusMODIFIED
CWE
CWE-264
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card