WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
BID:2562
Info
WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
| Bugtraq ID: | 2562 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 05 2001 12:00AM |
| Updated: | Apr 05 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq in a Defcom Labs Advisory on April 5, 2001. |
| Vulnerable: |
WatchGuard FireboxII Firmware 4.5 WatchGuard FireboxII Firmware 4.4 WatchGuard FireboxII Firmware 4.3 WatchGuard FireboxII Firmware 4.2 WatchGuard FireboxII Firmware 4.1 |
| Not Vulnerable: |
WatchGuard FireboxII Firmware 4.6 |
Discussion
WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
Firebox II is the firewall solution designed and distributed by Watchguard. Firebox II is designed as an enterprise level firewall with numerous security features and filtering customizations.
A problem with the firewall could allow a Denial of Service to legitimate users of network resources. By sending a custom crafted burst of packets to a Firebox II in a short period of time, the firewall becomes unstable. The result is a kernel oops, leading to crashing of the firewall. Power cycling is required to resume normal operation.
Therefore, it is possible for a remote user to crash Firebox II firewalls, and deny service to legitimate users of network resources.
Firebox II is the firewall solution designed and distributed by Watchguard. Firebox II is designed as an enterprise level firewall with numerous security features and filtering customizations.
A problem with the firewall could allow a Denial of Service to legitimate users of network resources. By sending a custom crafted burst of packets to a Firebox II in a short period of time, the firewall becomes unstable. The result is a kernel oops, leading to crashing of the firewall. Power cycling is required to resume normal operation.
Therefore, it is possible for a remote user to crash Firebox II firewalls, and deny service to legitimate users of network resources.
Exploit / POC
WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
Solution:
An upgrade is available:
WatchGuard FireboxII Firmware 4.1
WatchGuard FireboxII Firmware 4.2
WatchGuard FireboxII Firmware 4.3
WatchGuard FireboxII Firmware 4.4
WatchGuard FireboxII Firmware 4.5
Solution:
An upgrade is available:
WatchGuard FireboxII Firmware 4.1
-
WatchGuard FireboxII Firmware 4.6
http://www.watchguard.com/support
WatchGuard FireboxII Firmware 4.2
-
WatchGuard FireboxII Firmware 4.6
http://www.watchguard.com/support
WatchGuard FireboxII Firmware 4.3
-
WatchGuard FireboxII Firmware 4.6
http://www.watchguard.com/support
WatchGuard FireboxII Firmware 4.4
-
WatchGuard FireboxII Firmware 4.6
http://www.watchguard.com/support
WatchGuard FireboxII Firmware 4.5
-
WatchGuard FireboxII Firmware 4.6
http://www.watchguard.com/support
References
WatchGuard Firebox II High Malformed Packet Rate Denial of Service Vulnerability
References:
References: