CVE-2000-0553
2.6 · LOWOverview
CVE-2000-0553 is a low-severity vulnerability affecting darren_reed ipfilter. It was published on May 26, 2000 and has a CVSS 2.0 base score of 2.6 (LOW).
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
Technical Description
Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions.
Remediation
Check the references section for vendor advisories and patches from darren_reed. Update ipfilter to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
Affected Products
| Vendor | Product | Versions | Status |
|---|
References
Frequently Asked Questions
What is CVE-2000-0553?
CVE-2000-0553 is a low-severity vulnerability affecting darren_reed ipfilter. It was published on May 26, 2000 and has a CVSS 2.0 base score of 2.6 (LOW).
How severe is CVE-2000-0553?
This vulnerability has a CVSS 2.0 base score of 2.6, rated LOW. It can be exploited remotely over the network. No authentication or special privileges are required for exploitation.
How do I fix or remediate CVE-2000-0553?
Check the references section for vendor advisories and patches from darren_reed. Update ipfilter to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.
How can CyberStrike help with CVE-2000-0553?
CyberStrike's AI-powered security agents can automatically detect CVE-2000-0553 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.
How CyberStrike Helps
AI agents map your attack surface to find vulnerabilities like this one.
Automated penetration testing that runs continuously, not just quarterly.
AI-driven PR review catches vulnerable dependencies before they ship.
Browser-based exploitation validates findings with real proof-of-concept.
Related LOW CVEs from 2000
View all →Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local use
SGI MIPSPro compilers C, C++, F77 and F90 generate temporary files in /tmp with predictable file nam
IRIX crontab creates temporary files with predictable file names and with the umask of the user, whi
inpview in InPerson in SGI IRIX 5.3 through IRIX 6.5.10 allows local users to gain privileges via a
VMWare 1.1.2 allows local users to cause a denial of service via a symlink attack.
The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by
Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel req
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which a
The Netopia R9100 router does not prevent authenticated users from modifying SNMP tables, even if th
The Protected Store in Windows 2000 does not properly select the strongest encryption when available
Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a deni
The BAIR program does not properly restrict access to the Internet Explorer Internet options menu, w