Raptor Firewall Zero Length UDP Packet Resource Consumption Vulnerability

Bugtraq ID:	3509
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 05 2001 12:00AM
Updated:	Nov 05 2001 12:00AM
Credit:	This vulnerability was disclosed by Max Moser <[email protected]> on November 5, 2001.
Vulnerable:	Symantec VelociRaptor 1.1 Symantec VelociRaptor 1.0 Symantec Raptor Firewall 6.5 Windows NT - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Symantec Raptor Firewall 6.0.3 HP-UX - HP HP-UX 11.0 Symantec Raptor Firewall 6.0.2 Windows NT - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Symantec Raptor Firewall 6.0.2 Solaris - Sun Solaris 2.6 Symantec Raptor Firewall 5.0.3 Windows NT - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Symantec Raptor Firewall 4.0 .0 HP-UX - HP HP-UX 10.20
Not Vulnerable:	Symantec Raptor Firewall 6.5.3 Solaris - Sun Solaris 7.0 - Sun Solaris 2.6 Symantec Raptor Firewall 6.5.1 Solaris - Sun Solaris 7.0 - Sun Solaris 2.6 Symantec Enterprise Firewall 6.5.2 NT/2000 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0

Raptor Firewall Zero Length UDP Packet Resource Consumption Vulnerability

Solution:
There are no known vendor patches available.

This problem has reportedly been fixed in version more recent than 6.5.