CVE-2007-4461: bypass filtering due to out of period transmission time

Debian Bug report logs - #439227
CVE-2007-4461: bypass filtering due to out of period transmission time

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Thijs Kinkhorst <thijs@debian.org>

To: submit@bugs.debian.org

Subject: CVE-2007-4461: bypass filtering due to out of period transmission time

Date: Thu, 23 Aug 2007 14:29:23 +0200

[Message part 1 (text/plain, inline)]

Package: nufw
Severity: serious
Tags: security

Hi,

A security issue has been reported against your package nufw:
> NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers
> to bypass time-based packet filtering rules via certain "out of period"
> choices of packet transmission time.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4461
It seems the new upstream 2.2.4 fixes this.

Please mention the CVE id in the changelog when fixing this.
Also please check whether stable is vulnerable and coordinate 
with the security team.


Thanks,
Thijs

[Message part 2 (application/pgp-signature, inline)]

Message #10 received at 439227-done@bugs.debian.org (full text, mbox, reply):

From: Pierre Chifflier <p.chifflier@inl.fr>

To: 439227-done@bugs.debian.org

Subject: Re: Bug#439227: CVE-2007-4461: bypass filtering due to out of period transmission time

Date: Thu, 23 Aug 2007 16:53:58 +0200

[Message part 1 (text/plain, inline)]

Package: nufw
Version: 2.2.4-1

Stable is not vulnerable, and fixed version was uploaded to unstable
before the CVE was created (.changes attached).

Thanks,
Pierre

[nufw_2.2.4-1_amd64.changes (text/plain, attachment)]

Send a report that this bug log contains spam.