Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2001-0402

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

IPFilter 3.4.16版本及之前版本在其缓存中不包括充分的会话信息，远程攻击者可以通过在发送未成碎片数据包到不受限端口之后发送碎片数据包到受限端口来绕过访问限制。

AI Predicted 7.5 Difficulty: Easy EPSS 2.44% · P83

Public Exploits 1

ExploitDB · 1 EDB-20730 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2001-0402

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets to a restricted port after sending unfragmented packets to an unrestricted port.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
IPFilter访问限制绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IPFilter 3.4.16版本及之前版本在其缓存中不包括充分的会话信息，远程攻击者可以通过在发送未成碎片数据包到不受限端口之后发送碎片数据包到受限端口来绕过访问限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2001-0402

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2001-0402

请登录查看更多情报信息。

Vendor Advisories for CVE-2001-0402 (1)

Mailing List Discussions for CVE-2001-0402 (2)

Same Patch Batch · n/a · 2001-09-18 · 94 CVEs total

CVE-2001-0383 PHP Nuke远程ad横幅URL改变漏洞
CVE-2001-0377 Infradig Inframail服务拒绝漏洞
CVE-2001-0361 SSH安装启用漏洞
CVE-2001-0347 Microsoft W2K Telnet多种域用户账户访问漏洞
CVE-2001-0346 Microsoft Windows远程登录服务句柄泄漏
CVE-2001-0345 Microsoft Windows 2000 Telnet多会话拒绝服务漏洞
CVE-2001-0344 Microsoft SQL Server 2000权限提升漏洞
CVE-2001-0341 Microsoft FrontPage 2000服务器扩展fp30reg.dll远程缓冲区溢出漏洞(MS01-035)
CVE-2001-0348 Microsoft Windows 2000 telnet service拒绝服务漏洞
CVE-2001-0379 HP-UX newgrp访问权限获得漏洞
CVE-2001-0378 OpenBSD readline信息泄漏漏洞
CVE-2001-0387 HylaFAX格式字符串漏洞
CVE-2001-0388 time服务器守护进程timed漏洞
CVE-2001-0405 Linux防火墙漏洞
CVE-2001-0408 vim程序控制代码任意文件执行漏洞
CVE-2001-0409 vim(也称为gvim)漏洞
CVE-2001-0412 Cisco Content Services Switch User提升特权漏洞
CVE-2001-0413 BinTec X4000 Access路由器服务拒绝漏洞
CVE-2001-0414 Ntpd远程缓冲区溢出漏洞
CVE-2001-0427 Cisco VPN 3000集中器服务拒绝漏洞

Showing top 20 of 94 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2001-0402

No comments yet

Leave a comment