CVE-2001-1155

Critical

Published: 23/08/2001(UTC)Translated: 30/05/2026(UTC)NVD NIST

Summary

TCP Wrappers in FreeBSD versions 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.

Risk Assessment

Attackers could exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the system to the latest version and disable the PARANOID ACL option to minimize the risk associated with this vulnerability.

Original NVD description (English source)

TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote attackers to bypass intended access restrictions via DNS spoofing.