## Description

Race condition in IPFilter firewall 3.4.3 and earlier, when configured with overlapping "return-rst" and "keep state" rules, allows remote attackers to bypass access restrictions.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### darren_reed - ipfilter

Affected Versions:

- 3.3.15

### darren_reed - ipfilter

Affected Versions:

- 3.4.3

## References

- http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html
  Exploit Patch Vendor Advisory
- http://www.osvdb.org/1377
- http://www.securityfocus.com/bid/1308
  Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4994
- http://archives.neohapsis.com/archives/bugtraq/2000-05/0326.html
  Exploit Patch Vendor Advisory
- http://www.osvdb.org/1377
- http://www.securityfocus.com/bid/1308
  Patch Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/4994

Neural Processor Active