Description
IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing the target system to send a "DCC SEND" request to a malicious server which listens on port 6667, which may cause the module to believe that the traffic is a valid request and allow the connection to the port specified in the DCC SEND request.
References
- 20010730 Re: [RAZOR] Linux kernel IP masquerading vulnerability (_actual_ patch) mailing-list
- 20010730 [RAZOR] Linux kernel IP masquerading vulnerability mailing-list
- linux-ipmasqirc-bypass-protection(6923) vdb-entry
- 1916 vdb-entry
- 3117 vdb-entry