CVE-2000-0289: Debian Linux

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

IP masquerading in Linux 2.2.x allows remote attackers to route UDP packets through the internal interface by modifying the external source IP address and port number to match those of an established connection.

Affected products

• Debian Debian Linux: version 2.1 only; version 2.2 only
• Linux Linux Kernel: version 2.2.10 only; version 2.2.12 only; version 2.2.14 only
• Red Hat Linux: version 6.0 only; version 6.1 only; version 6.2 only

Published 2000-03-27. Last modified 2026-06-16.