VulnerabilityModified
CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
HIGH 7.5EPSS 1.89%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.89% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- suse/suse iptables · debian/debian linux · linux/linux kernel · redhat/fedora core
- Source
- cve@mitre.org
References
- http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html
- http://www.ciac.org/ciac/bulletins/p-026.shtml
- http://www.debian.org/security/2004/dsa-580
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:125
- http://www.securityfocus.com/bid/11570Patch, Vendor Advisory
- https://bugzilla.fedora.us/show_bug.cgi?id=2252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17928
- https://www.ubuntu.com/usn/usn-81-1/
- http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html
- http://www.ciac.org/ciac/bulletins/p-026.shtml
- http://www.debian.org/security/2004/dsa-580
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:125
- http://www.securityfocus.com/bid/11570Patch, Vendor Advisory
- https://bugzilla.fedora.us/show_bug.cgi?id=2252
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17928
- https://www.ubuntu.com/usn/usn-81-1/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.