Description
IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
References
- VU#230307 third-party-advisory
- http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html
- HPSBUX0203-027 vendor-advisory
- MDKSA-2002:041 vendor-advisory
- 20020227 Fwd: [ANNOUNCE] Security Advisory about IRC DCC connection tracking mailing-list
- 20020227 security advisory linux 2.4.x ip_conntrack_irc mailing-list
- RHSA-2002:028 vendor-advisory
- linux-dcc-port-access(8302) vdb-entry
- 4188 vdb-entry