Description
NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain "out of period" choices of packet transmission time.
References
- 26546 third-party-advisory
- 39725 vdb-entry
- 25379 vdb-entry
- http://www.nufw.org/+NuFW-2-2-4%2C201+.html
- nufw-arrivaltime-security-bypass(36134) vdb-entry