FYI re: "FreeBSD ECE flag ipfw protection bypass"

Colin Percival colin.percival at wadham.ox.ac.uk
Wed Apr 14 02:35:00 PDT 2004


  Several people have noticed that SecuriTeam.com is reporting a
"FreeBSD ECE flag ipfw protection bypass" exploit.  In an effort
to save time, let me say this publicly: SecuriTeam.com is three
years out of date.
  This problem was fixed in FreeBSD 3.5-STABLE and 4.2-STABLE in
January 2001, and reported in Security Advisory FreeBSD-SA-01:08.

Colin Percival



More information about the freebsd-ipfw mailing list