Project

General

Profile

Actions
Copy link

Bug #1661

closed

Missing input validation in system_routes_edit.php

Added by Chris Buechler over 13 years ago. Updated over 12 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Routing
Target version:
2.1
Start date:
07/10/2011
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.1-IPv6
Affected Architecture:

Description

system_routes_edit.php doesn't validate that the gateway selected is the same protocol as the entered "Destination network". Routes to an IPv4 network can't be added to an IPv6 gateway nor vice versa. If an IPv4 gateway is chosen, the "Destination network" must be an IPv4 subnet (including a valid v4 subnet mask, > 32 only valid with v6). If an IPv6 gateway is chosen, the "Destination network" must be an IPv6 subnet.

Actions
Copy link

Also available in: Atom PDF