National Cyber Awareness System

Vulnerability Summary for CVE-2005-2873

Overview

The ipt_recent kernel module (ipt_recent.c) in Linux kernel 2.6.12 and earlier does not properly perform certain time tests when the jiffies value is greater than LONG_MAX, which can cause ipt_recent netfilter rules to block too early, a different vulnerability than CVE-2005-2872.

Impact

CVSS Severity (version 2.0 incomplete approximation):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: MISC

Name: http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/

Type: Advisory; Patch Information

Hyperlink:http://blog.blackdown.de/2005/05/09/fixing-the-ipt_recent-netfilter-module/

External Source: MANDRAKE

Name: MDKSA-2005:220

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

External Source: MANDRAKE

Name: MDKSA-2005:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

External Source: REDHAT

Name: RHBA-2007-0304

Hyperlink:http://rhn.redhat.com/errata/RHBA-2007-0304.html

External Source: OVAL

Name: oval:org.mitre.oval:def:9838

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9838

External Source: BID

Name: 14791

Hyperlink:http://www.securityfocus.com/bid/14791

External Source: MANDRIVA

Name: MDKSA-2005:235

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:235

External Source: MANDRIVA

Name: MDKSA-2005:220

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:220

External Source: MANDRIVA

Name: MDKSA-2005:219

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2005:219

External Source: SECUNIA

Name: 17826

Hyperlink:http://secunia.com/advisories/17826

References to Check Content

Identifier:oval:org.mitre.oval:def:9838

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9838