Unrated severityNVD Advisory· Published Jul 19, 2005· Updated Apr 16, 2026
CVE-2005-2317
CVE-2005-2317
Description
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
37cpe:2.3:a:shorewall:shorewall:2.0.0:*:*:*:*:*:*:*+ 36 more
- cpe:2.3:a:shorewall:shorewall:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.0a:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.0b:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2a:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2b:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2c:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2d:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2e:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.2f:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.3a:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.3b:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.3c:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.2.4:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.4.0_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:shorewall:shorewall:2.4.0_rc2:*:*:*:*:*:*:*
- (no CPE)range: <2.4.1, <2.2.5, <2.0.17
Patches
Vulnerability mechanics
No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.
References
9- seclists.org/lists/fulldisclosure/2005/Jul/0409.htmlnvdPatchVendor Advisory
- secunia.com/advisories/16087nvdPatchVendor Advisory
- shorewall.net/News.htmnvdPatchVendor Advisory
- secunia.com/advisories/17110nvd
- secunia.com/advisories/17113nvd
- www.debian.org/security/2005/dsa-849nvd
- www.gentoo.org/security/en/glsa/glsa-200507-20.xmlnvd
- www.securityfocus.com/bid/14292nvd
- www.ubuntu.com/usn/usn-197-1nvd
News mentions
0No linked articles in our index yet.