Bug 858995 (CVE-2012-4435)
Summary: | CVE-2012-4435 fwknop: fwknopd server did not properly validate allowed IP addresses from malicious authenticated clients | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Jan Lieskovsky <jlieskov> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | mitr, pvrabec |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | fwknop 2.0.3 | Doc Type: | Bug Fix |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-08-22 14:50:17 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 859006, 859007 | ||
Bug Blocks: |
Description
Jan Lieskovsky
2012-09-20 10:32:52 UTC
This issue affects the versions of the fwknop package, as shipped with Rawhide and Fedora release of 17. Please schedule an update. -- This issue did NOT affect the version of the fwknop package, as shipped with Fedora release of 16 (as it is Perl language based implementation yet). Created fwknop tracking bugs for this issue Affects: fedora-rawhide [bug 859006] Affects: fedora-17 [bug 859007] |