Ingate Firewall And SIParator Remote Denial of Service Vulnerability

Bugtraq ID:	27222
Class:	Design Error
CVE:	CVE-2008-0263
Remote:	Yes
Local:	No
Published:	Jan 10 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Ingate SIParator 4.6 Ingate SIParator 4.5.2 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2.3 Ingate SIParator 4.2.2 Ingate SIParator 4.2.1 Ingate SIParator 3.3.1 Ingate SIParator 3.2.1 Ingate SIParator 3.2 Ingate SIParator 4.4 Ingate Firewall 4.6 Ingate Firewall 4.5.2 Ingate Firewall 4.5.1 Ingate Firewall 4.4.1 Ingate Firewall 4.3.4 Ingate Firewall 4.3.3 Ingate Firewall 4.3.2 Ingate Firewall 4.3.1 Ingate Firewall 4.3 Ingate Firewall 4.2 .3 Ingate Firewall 4.2 .2 Ingate Firewall 4.2 .1 Ingate Firewall 4.1.3 Ingate Firewall 3.3.1 Ingate Firewall 3.2.1 Ingate Firewall 3.2
Not Vulnerable:	Ingate SIParator 4.6.1 Ingate Firewall 4.6.1

Ingate Firewall And SIParator Remote Denial of Service Vulnerability

Ingate Firewall and SIParator products are prone to a remote denial-of-service vulnerability.

Successful exploits allow remote attackers to consume all available network ports, which will cause the device to refuse further calls, thus denying service to legitimate users.

Versions prior to Ingate Firewall 4.6.1 and Ingate SIParator 4.6.1 are vulnerable.

Ingate Firewall And SIParator Remote Denial of Service Vulnerability

To exploit this issue, attackers likely use readily available network utilities.

Ingate Firewall And SIParator Remote Denial of Service Vulnerability

Solution:
The vendor has released updates to address this issue. Please see the references for more information.

Ingate Firewall And SIParator Remote Denial of Service Vulnerability

References:

• Ingate Home Page (Ingate)
  
• Release notice for Ingate Firewall® 4.6.1 and Ingate SIParator® 4.6.1 (Ingate)