Detections
Analytics
Firewall UDP Packet Source Port 53 Ruleset Bypass
high Nessus Plugin ID 11580
Language:
Synopsis
Firewall rulesets can be bypassed.Description
It is possible to bypass the rules of the remote firewall by sending UDP packets with a source port equal to 53.An attacker may use this flaw to inject UDP packets to the remote hosts, in spite of the presence of a firewall.
Solution
Either contact the vendor for an update or review the firewall rules settings.See Also
Plugin Details
Severity: High
ID: 11580
File Name: kerio_PF_udpbypass.nasl
Version: 1.34
Type: remote
Family: Firewalls
Published: 5/6/2003
Updated: 11/8/2019
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2003-1491
CVSS v3
Risk Factor: High
Base Score: 7.3
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Vulnerability Information
CPE: cpe:/a:kerio:personal_firewall
Required KB Items: Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 9/22/2004
Vulnerability Publication Date: 4/23/2003
Reference Information
CVE: CVE-2003-1491, CVE-2004-1473