Description
The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets.
References
- linux-netfilter-bypass-filter(7267) vdb-entry
- 20011008 Bug in Linux 2.4 / iptables MAC match module mailing-list
- 3418 vdb-entry