Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
BID:19125
CVE-2006-3678 |Info
Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
| Bugtraq ID: | 19125 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2006 12:00AM |
| Updated: | Jul 25 2006 04:02PM |
| Credit: | Andres Riancho is credited with discovering this vulnerability. |
| Vulnerable: |
TippingPoint ZPHA 0 TippingPoint X505 0 TippingPoint SMS 0 TippingPoint 5000E 0 TippingPoint 50 0 TippingPoint 400 0 TippingPoint 2400E 0 TippingPoint 200E 0 TippingPoint 200 0 TippingPoint 1200E 0 |
| Not Vulnerable: | |
Discussion
Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
TippingPoint IPSs are prone to a detection-bypass vulnerability because these appliances fail to properly handle malformed network packets.
A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable appliances, allowing all traffic through without inspection. This will likely aid in further attacks.
Reports indicate that TippingPoint IPSs with TOS version 2.2.3.6514 and prior are vulnerable.
TippingPoint IPSs are prone to a detection-bypass vulnerability because these appliances fail to properly handle malformed network packets.
A successful exploit of this issue may allow an attacker to bypass the filter and detection system of vulnerable appliances, allowing all traffic through without inspection. This will likely aid in further attacks.
Reports indicate that TippingPoint IPSs with TOS version 2.2.3.6514 and prior are vulnerable.
Exploit / POC
Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Solution / Fix
Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].
References
Multiple TippingPoint IPS Malformed Packet Detection Bypass Vulnerability
References:
References:
- TippingPoit IPS Homepage (TippingPoint)
- [CYBSEC] TippingPoint detection bypass (Andres Riancho)