SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
BID:3098
Info
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
| Bugtraq ID: | 3098 |
| Class: | Design Error |
| CVE: |
CVE-2001-1104 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 25 2001 12:00AM |
| Updated: | Jul 11 2009 06:56AM |
| Credit: | Reported to Bugtraq by Dan Ferris <[email protected]> on July 25, 2001. |
| Vulnerable: |
SonicWALL SOHO 5.1.5 .0 SonicWALL SOHO 5.0 .0 SonicWALL SOHO 4.0 .0 |
| Not Vulnerable: | |
Discussion
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
A vulnerability exists in the SonicWALL SOHO Firewall TCP/IP stack implementation that could allow an attacker to easily predict its TCP initial sequence numbers.
By predicting a sequence number, several attacks could be performed; an attacker could disrupt or hijack existing connections, or spoof future connections.
A vulnerability exists in the SonicWALL SOHO Firewall TCP/IP stack implementation that could allow an attacker to easily predict its TCP initial sequence numbers.
By predicting a sequence number, several attacks could be performed; an attacker could disrupt or hijack existing connections, or spoof future connections.
Solution / Fix
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
References:
References:
- ViewPoint Homepage (SonicWALL)