Boletines de Vulnerabilidades

int(1719)

Boletines de Vulnerabilidades

Vulnerabilidad en shorewall
Clasificación de la vulnerabilidad
Propiedad	Valor
Nivel de Confianza	Oficial
Impacto	Aumento de la visibilidad
Dificultad	Experto
Requerimientos del atacante	Acceso remoto sin cuenta a un servicio exotico
Información sobre el sistema
Propiedad	Valor
Fabricante afectado	GNU/Linux
Software afectado	shorewall
Descripción
Se ha descubierto una vulnerabilidad en shorewall. La vulnerabilidad reside en que si la directriz MACLIST_TTL está configurada con un valor mayor que 0 o MACLIST_DISPOSITION está configurada cómo ACCEPT un cliente que sea aceptado por el filtrado de MAC se va a saltar cualquier otra política o regla configurada en shorewall. La explotación de esta vulnerabilidad podría permitir a un atacante remoto acceder a los servicios abiertos en el cortafuegos.
Solución
Actualización de sofware Mandriva Linux Mandrakelinux 10.0 x86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/shorewall-2.0.17-1.1.100mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/RPMS/shorewall-doc-2.0.17-1.1.100mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.0/SRPMS/shorewall-2.0.17-1.1.100mdk.src.rpm AMD64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/shorewall-2.0.17-1.1.100mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/RPMS/shorewall-doc-2.0.17-1.1.100mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/amd64/10.0/SRPMS/shorewall-2.0.17-1.1.100mdk.src.rpm Mandrakelinux 10.1 x86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/shorewall-2.0.17-1.1.101mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/RPMS/shorewall-doc-2.0.17-1.1.101mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.1/SRPMS/shorewall-2.0.17-1.1.101mdk.src.rpm X86_64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/shorewall-2.0.17-1.1.101mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/RPMS/shorewall-doc-2.0.17-1.1.101mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.1/SRPMS/shorewall-2.0.17-1.1.101mdk.src.rpm Corporate Server 3.0 x86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/shorewall-2.0.17-1.1.C30mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/RPMS/shorewall-doc-2.0.17-1.1.C30mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/corporate/3.0/SRPMS/shorewall-2.0.17-1.1.C30mdk.src.rpm X86_64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/shorewall-2.0.17-1.1.C30mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/RPMS/shorewall-doc-2.0.17-1.1.C30mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/corporate/3.0/SRPMS/shorewall-2.0.17-1.1.C30mdk.src.rpm Multi Network Firewall 2.0 x86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/shorewall-2.0.17-1.1.M20mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/RPMS/shorewall-doc-2.0.17-1.1.M20mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/mnf/2.0/SRPMS/shorewall-2.0.17-1.1.M20mdk.src.rpm Mandrivalinux LE2005 x86 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/shorewall-2.0.17-1.1.102mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/RPMS/shorewall-doc-2.0.17-1.1.102mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/10.2/SRPMS/shorewall-2.0.17-1.1.102mdk.src.rpm X86_64 ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/shorewall-2.0.17-1.1.102mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/RPMS/shorewall-doc-2.0.17-1.1.102mdk.noarch.rpm ftp://ftp.ps.pl/mirrors/Mandrakelinux/official/updates/x86_64/10.2/SRPMS/shorewall-2.0.17-1.1.102mdk.src.rpm Debian Debian Linux 3.1 Source http://security.debian.org/pool/updates/main/s/shorewall/shorewall_2.2.3-2.dsc http://security.debian.org/pool/updates/main/s/shorewall/shorewall_2.2.3-2.diff.gz http://security.debian.org/pool/updates/main/s/shorewall/shorewall_2.2.3.orig.tar.gz Architecture independent http://security.debian.org/pool/updates/main/s/shorewall/shorewall_2.2.3-2_all.deb
Identificadores estándar
Propiedad	Valor
CVE	CAN-2005-2317
BID
Recursos adicionales
Mandriva Security Advisories MDKSA-2005:123 http://www.mandriva.com/security/advisories?name=MDKSA-2005:123 Debian Security Advisory (DSA 849-1) http://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00243.html