iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2002-08-31T04:00:00

Updated: 2024-08-08T04:51:08.314Z

Reserved: 2002-08-27T00:00:00

Link: CVE-2001-1387

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2001-11-05T05:00:00.000

Modified: 2024-02-14T15:17:09.183

Link: CVE-2001-1387

cve-icon Redhat

Severity :

Publid Date: 2001-10-30T00:00:00Z

Links: CVE-2001-1387 - Bugzilla