Read the docs
TI-2002-01897 Aliases CVE-2002-1978GHSA-59wx-2wpf-8j48

IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending…

Priority LOW 37CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

IPFilter 3.1.1 through 3.4.28 allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.

Why it matters now

EPSS 0.02007 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 82

CPEVersionsRoleVendor
cpe:2.3:a:darren_reed:ipfilter:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.3:*:*:*:*:*:*:*3.1.3VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.4:*:*:*:*:*:*:*3.1.4VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.5:*:*:*:*:*:*:*3.1.5VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.6:*:*:*:*:*:*:*3.1.6VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.7:*:*:*:*:*:*:*3.1.7VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.8:*:*:*:*:*:*:*3.1.8VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.9:*:*:*:*:*:*:*3.1.9VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.1.10:*:*:*:*:*:*:*3.1.10VulnerableDarren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.3:*:*:*:*:*:*:* Versions 3.1.3 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.4:*:*:*:*:*:*:* Versions 3.1.4 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.5:*:*:*:*:*:*:* Versions 3.1.5 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.6:*:*:*:*:*:*:* Versions 3.1.6 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.7:*:*:*:*:*:*:* Versions 3.1.7 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.8:*:*:*:*:*:*:* Versions 3.1.8 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.9:*:*:*:*:*:*:* Versions 3.1.9 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.1.10:*:*:*:*:*:*:* Versions 3.1.10 Vulnerable ·Darren Reed
Show 72 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:darren_reed:ipfilter:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.3:*:*:*:*:*:*:*3.2.3VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.5:*:*:*:*:*:*:*3.2.5VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.6:*:*:*:*:*:*:*3.2.6VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.7:*:*:*:*:*:*:*3.2.7VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.8:*:*:*:*:*:*:*3.2.8VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.9:*:*:*:*:*:*:*3.2.9VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.10:*:*:*:*:*:*:*3.2.10VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.11:*:*:*:*:*:*:*3.2.11VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.12:*:*:*:*:*:*:*3.2.12VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.13:*:*:*:*:*:*:*3.2.13VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.14:*:*:*:*:*:*:*3.2.14VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.15:*:*:*:*:*:*:*3.2.15VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.16:*:*:*:*:*:*:*3.2.16VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.17:*:*:*:*:*:*:*3.2.17VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.18:*:*:*:*:*:*:*3.2.18VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.19:*:*:*:*:*:*:*3.2.19VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.20:*:*:*:*:*:*:*3.2.20VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.21:*:*:*:*:*:*:*3.2.21VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.2.22:*:*:*:*:*:*:*3.2.22VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.3:*:*:*:*:*:*:*3.3.3VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.4:*:*:*:*:*:*:*3.3.4VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.5:*:*:*:*:*:*:*3.3.5VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.6:*:*:*:*:*:*:*3.3.6VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.7:*:*:*:*:*:*:*3.3.7VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.8:*:*:*:*:*:*:*3.3.8VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.9:*:*:*:*:*:*:*3.3.9VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.10:*:*:*:*:*:*:*3.3.10VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.11:*:*:*:*:*:*:*3.3.11VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.12:*:*:*:*:*:*:*3.3.12VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.13:*:*:*:*:*:*:*3.3.13VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.14:*:*:*:*:*:*:*3.3.14VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.15:*:*:*:*:*:*:*3.3.15VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.16:*:*:*:*:*:*:*3.3.16VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.17:*:*:*:*:*:*:*3.3.17VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.18:*:*:*:*:*:*:*3.3.18VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.19:*:*:*:*:*:*:*3.3.19VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.20:*:*:*:*:*:*:*3.3.20VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.21:*:*:*:*:*:*:*3.3.21VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.3.22:*:*:*:*:*:*:*3.3.22VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.4:*:*:*:*:*:*:*3.4.4VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.5:*:*:*:*:*:*:*3.4.5VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.6:*:*:*:*:*:*:*3.4.6VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.7:*:*:*:*:*:*:*3.4.7VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.8:*:*:*:*:*:*:*3.4.8VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.9:*:*:*:*:*:*:*3.4.9VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.10:*:*:*:*:*:*:*3.4.10VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.11:*:*:*:*:*:*:*3.4.11VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.12:*:*:*:*:*:*:*3.4.12VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.13:*:*:*:*:*:*:*3.4.13VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.14:*:*:*:*:*:*:*3.4.14VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.15:*:*:*:*:*:*:*3.4.15VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.16:*:*:*:*:*:*:*3.4.16VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.17:*:*:*:*:*:*:*3.4.17VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.18:*:*:*:*:*:*:*3.4.18VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.19:*:*:*:*:*:*:*3.4.19VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.20:*:*:*:*:*:*:*3.4.20VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.21:*:*:*:*:*:*:*3.4.21VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.22:*:*:*:*:*:*:*3.4.22VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.23:*:*:*:*:*:*:*3.4.23VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.24:*:*:*:*:*:*:*3.4.24VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.25:*:*:*:*:*:*:*3.4.25VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.26:*:*:*:*:*:*:*3.4.26VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.27:*:*:*:*:*:*:*3.4.27VulnerableDarren Reed
cpe:2.3:a:darren_reed:ipfilter:3.4.28:*:*:*:*:*:*:*3.4.28VulnerableDarren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.13:*:*:*:*:*:*:* Versions 3.2.13 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.14:*:*:*:*:*:*:* Versions 3.2.14 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.15:*:*:*:*:*:*:* Versions 3.2.15 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.16:*:*:*:*:*:*:* Versions 3.2.16 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.17:*:*:*:*:*:*:* Versions 3.2.17 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.18:*:*:*:*:*:*:* Versions 3.2.18 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.19:*:*:*:*:*:*:* Versions 3.2.19 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.20:*:*:*:*:*:*:* Versions 3.2.20 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.21:*:*:*:*:*:*:* Versions 3.2.21 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.2.22:*:*:*:*:*:*:* Versions 3.2.22 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.9:*:*:*:*:*:*:* Versions 3.3.9 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.10:*:*:*:*:*:*:* Versions 3.3.10 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.11:*:*:*:*:*:*:* Versions 3.3.11 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.12:*:*:*:*:*:*:* Versions 3.3.12 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.13:*:*:*:*:*:*:* Versions 3.3.13 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.14:*:*:*:*:*:*:* Versions 3.3.14 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.15:*:*:*:*:*:*:* Versions 3.3.15 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.16:*:*:*:*:*:*:* Versions 3.3.16 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.17:*:*:*:*:*:*:* Versions 3.3.17 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.18:*:*:*:*:*:*:* Versions 3.3.18 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.19:*:*:*:*:*:*:* Versions 3.3.19 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.20:*:*:*:*:*:*:* Versions 3.3.20 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.21:*:*:*:*:*:*:* Versions 3.3.21 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.3.22:*:*:*:*:*:*:* Versions 3.3.22 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.4:*:*:*:*:*:*:* Versions 3.4.4 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.5:*:*:*:*:*:*:* Versions 3.4.5 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.6:*:*:*:*:*:*:* Versions 3.4.6 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.7:*:*:*:*:*:*:* Versions 3.4.7 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.8:*:*:*:*:*:*:* Versions 3.4.8 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.9:*:*:*:*:*:*:* Versions 3.4.9 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.10:*:*:*:*:*:*:* Versions 3.4.10 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.11:*:*:*:*:*:*:* Versions 3.4.11 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.12:*:*:*:*:*:*:* Versions 3.4.12 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.13:*:*:*:*:*:*:* Versions 3.4.13 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.14:*:*:*:*:*:*:* Versions 3.4.14 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.15:*:*:*:*:*:*:* Versions 3.4.15 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.16:*:*:*:*:*:*:* Versions 3.4.16 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.17:*:*:*:*:*:*:* Versions 3.4.17 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.18:*:*:*:*:*:*:* Versions 3.4.18 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.19:*:*:*:*:*:*:* Versions 3.4.19 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.20:*:*:*:*:*:*:* Versions 3.4.20 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.21:*:*:*:*:*:*:* Versions 3.4.21 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.22:*:*:*:*:*:*:* Versions 3.4.22 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.23:*:*:*:*:*:*:* Versions 3.4.23 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.24:*:*:*:*:*:*:* Versions 3.4.24 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.25:*:*:*:*:*:*:* Versions 3.4.25 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.26:*:*:*:*:*:*:* Versions 3.4.26 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.27:*:*:*:*:*:*:* Versions 3.4.27 Vulnerable ·Darren Reed
  • cpe:2.3:a:darren_reed:ipfilter:3.4.28:*:*:*:*:*:*:* Versions 3.4.28 Vulnerable ·Darren Reed

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-1978
  2. 2026-10-03 Alias added: GHSA-59wx-2wpf-8j48

References

Patch 1

Advisory 1

  • TI-2001-00395 IPFilter 3.4.16 and earlier does not include sufficient session information in its cache… CVSS 2.0HIGH 7.5
  • TI-2009-01397 Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter)… CVSS 2.0HIGH 7.2
  • TI-1999-01192 IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink… CVSS 2.0HIGH 7.2
  • TI-2000-00552 Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping… CVSS 2.0LOW 2.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences