CVE-2006-4572 in Linux Kernel
Summary
ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
Once again VulDB remains the best source for vulnerability data.
Reservation
09/06/2006
Disclosure
11/06/2006
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 2663 | Linux Kernel IPv6 Fragmentation access control | 264 | Proof-of-Concept | Official fix | CVE-2006-4572 |