Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Linux Kernel IRC DCC Connection Tracking Module Arbitrary Port Access Vulnerabil

Linux Kernel IRC DCC Connection Tracking Module Arbitrary Port Access Vulnerabil

by Nikola Strahija on March 2nd, 2002 The netfilter connection tracking code in the Linux kernel does not properly handle DCC chats. When a DCC chat is initiated, the expected behavior of the firewall is to listen on a range of ports for a connection request from a specific IP address. When the connection from the specific IP is made, the DCC chat is initiated. However, the code included in the affected kernels does not properly restrict access, listening on a range of ports for a connection from any IP address


Remote: Yes

Exploit: No exploit is required for this vulnerability.

Solution: Fixes available:


Linux kernel 2.4.9:

Red Hat RPM kernel-2.4.9-31.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-2.4.9-31.alpha.rpm

Red Hat RPM kernel-2.4.9-31.athlon.rpm
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-2.4.9-31.athlon.rpm

Red Hat RPM kernel-2.4.9-31.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-2.4.9-31.i586.rpm
Release 7.1

Red Hat RPM kernel-2.4.9-31.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-2.4.9-31.i586.rpm
Release 7.2

Red Hat RPM kernel-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-2.4.9-31.i686.rpm
Release 7.2

Red Hat RPM kernel-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-2.4.9-31.i686.rpm
Release 7.1

Red Hat RPM kernel-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-2.4.9-31.ia64.rpm
Release 7.1

Red Hat RPM kernel-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/kernel-2.4.9-31.ia64.rpm

Red Hat RPM kernel-2.4.9-31.s390.rpm
ftp://updates.redhat.com/7.2/en/os/s390/kernel-2.4.9-31.s390.rpm
Release 7.2

Red Hat RPM kernel-BOOT-2.4.9-31.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-BOOT-2.4.9-31.alpha.rpm

Red Hat RPM kernel-BOOT-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-BOOT-2.4.9-31.i386.rpm
Release 7.1

Red Hat RPM kernel-BOOT-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-BOOT-2.4.9-31.i386.rpm
Release 7.2

Red Hat RPM kernel-BOOT-2.4.9-31.s390.rpm
ftp://updates.redhat.com/7.2/en/os/s390/kernel-BOOT-2.4.9-31.s390.rpm
Release 7.2

Red Hat RPM kernel-debug-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-debug-2.4.9-31.i686.rpm

Red Hat RPM kernel-debug-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-debug-2.4.9-31.i686.rpm
Release 7.1

Red Hat RPM kernel-doc-2.4.9-31.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-doc-2.4.9-31.alpha.rpm

Red Hat RPM kernel-doc-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-doc-2.4.9-31.i386.rpm
Release 7.1

Red Hat RPM kernel-doc-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-doc-2.4.9-31.i386.rpm
Release 7.2

Red Hat RPM kernel-doc-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-doc-2.4.9-31.ia64.rpm
Release 7.1

Red Hat RPM kernel-enterprise-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-enterprise-2.4.9-31.i686.rpm

Red Hat RPM kernel-enterprise-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-enterprise-2.4.9-31.i686.rpm
Release 7.1

Red Hat RPM kernel-headers-2.4.9-31.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-headers-2.4.9-31.alpha.rpm

Red Hat RPM kernel-headers-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-headers-2.4.9-31.i386.rpm
Release 7.1

Red Hat RPM kernel-headers-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-headers-2.4.9-31.i386.rpm
Release 7.2

Red Hat RPM kernel-headers-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-headers-2.4.9-31.ia64.rpm
Release 7.1

Red Hat RPM kernel-headers-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/kernel-headers-2.4.9-31.ia64.rpm
Release 7.2

Red Hat RPM kernel-headers-2.4.9-31.s390.rpm
ftp://updates.redhat.com/7.2/en/os/s390/kernel-headers-2.4.9-31.s390.rpm
Release 7.2

Red Hat RPM kernel-smp-2.4.9-31.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/kernel-smp-2.4.9-31.alpha.rpm
Release 7.1

Red Hat RPM kernel-smp-2.4.9-31.athlon.rpm
ftp://updates.redhat.com/7.1/en/os/athlon/kernel-smp-2.4.9-31.athlon.rpm

Red Hat RPM kernel-smp-2.4.9-31.athlon.rpm
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-smp-2.4.9-31.athlon.rpm
Release 7.1

Red Hat RPM kernel-smp-2.4.9-31.i586.rpm
ftp://updates.redhat.com/7.1/en/os/i586/kernel-smp-2.4.9-31.i586.rpm
Release 7.1

Red Hat RPM kernel-smp-2.4.9-31.i586.rpm
ftp://updates.redhat.com/7.2/en/os/i586/kernel-smp-2.4.9-31.i586.rpm
Release 7.2

Red Hat RPM kernel-smp-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.2/en/os/i686/kernel-smp-2.4.9-31.i686.rpm
Release 7.2

Red Hat RPM kernel-smp-2.4.9-31.i686.rpm
ftp://updates.redhat.com/7.1/en/os/i686/kernel-smp-2.4.9-31.i686.rpm
Release 7.1

Red Hat RPM kernel-smp-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-smp-2.4.9-31.ia64.rpm
Release 7.1

Red Hat RPM kernel-smp-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/kernel-smp-2.4.9-31.ia64.rpm

Red Hat RPM kernel-source-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-source-2.4.9-31.i386.rpm
Release 7.2

Red Hat RPM kernel-source-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-source-2.4.9-31.i386.rpm
Release 7.1

Red Hat RPM kernel-source-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/kernel-source-2.4.9-31.ia64.rpm
Release 7.1

Red Hat RPM kernel-source-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/kernel-source-2.4.9-31.ia64.rpm
Release 7.2

Red Hat RPM kernel-source-2.4.9-31.s390.rpm
ftp://updates.redhat.com/7.2/en/os/s390/kernel-source-2.4.9-31.s390.rpm
Release 7.2

Red Hat RPM kernel-doc-2.4.9-31.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/kernel-doc-2.4.9-31.ia64.rpm
Release 7.2

Red Hat RPM kernel-doc-2.4.9-31.s390.rpm
ftp://updates.redhat.com/7.2/en/os/s390/kernel-doc-2.4.9-31.s390.rpm
Release 7.2

Red Hat RPM kernel-2.4.9-31.athlon.rpm
ftp://updates.redhat.com/7.2/en/os/athlon/kernel-2.4.9-31.athlon.rpm
Release 7.1

Red Hat RPM kernel-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/kernel-2.4.9-31.i386.rpm
Release 7.2

Red Hat RPM kernel-2.4.9-31.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/kernel-2.4.9-31.i386.rpm
Release 7.1

Linux kernel 2.4.14:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.15:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.16:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.17:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-7:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-6:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-5:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-4:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-3:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-2:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz

Linux kernel 2.4.18pre-1:

Linux Upgrade linux-2.4.18.tar.gz
http://www.kernel.org/pub/linux/kernel/v2.4/linux-2.4.18.tar.gz



Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »