CVE ID:	CVE-2010-2242
Description:	Red Hat libvirt 0.2.0 through 0.8.2 creates iptables rules with improper mappings of privileged source ports, which allows guest OS users to bypass intended access restrictions by leveraging IP address and source-port values, as demonstrated by copying and deleting an NFS directory tree.
Test IDs:	1.3.6.1.4.1.25623.1.0.67777   1.3.6.1.4.1.25623.1.0.67785   1.3.6.1.4.1.25623.1.0.67748   1.3.6.1.4.1.25623.1.0.880654
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2242 ADV-2010-2062 http://www.vupen.com/english/advisories/2010/2062 ADV-2010-2763 http://www.vupen.com/english/advisories/2010/2763 FEDORA-2010-10960 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044520.html FEDORA-2010-11021 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044579.html RHSA-2010:0615 http://www.redhat.com/support/errata/RHSA-2010-0615.html SUSE-SR:2010:017 http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html USN-1008-1 http://ubuntu.com/usn/usn-1008-1 USN-1008-2 http://ubuntu.com/usn/usn-1008-2 USN-1008-3 http://ubuntu.com/usn/usn-1008-3 http://libvirt.org/news.html http://libvirt.org/news.html https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943 https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/591943 https://bugzilla.redhat.com/show_bug.cgi?id=602455 https://bugzilla.redhat.com/show_bug.cgi?id=602455