Description
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T04:51:08.314Z
Reserved: 2002-08-27T00:00:00.000Z
Link: CVE-2001-1387
No data.
Status : Modified
Published: 2001-11-05T05:00:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2001-1387
OpenCVE Enrichment
No data.
Weaknesses