PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
BID:3961
Info
PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
| Bugtraq ID: | 3961 |
| Class: | Design Error |
| CVE: |
CVE-2002-0208 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 25 2002 12:00AM |
| Updated: | Jul 11 2009 09:56AM |
| Credit: | This vulnerability was announced by Ofir Arkin <[email protected]> via Bugtraq on January 25, 2002. |
| Vulnerable: |
PGP Security PGPfire 7.1 |
| Not Vulnerable: | |
Discussion
PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
PGPfire is a desktop firewall solution distributed and maintained by PGP Security. It is available for Microsoft Windows operating systems.
When PGPfire is installed on a system, the software replaces the default Windows TCP stack with a version supplied in the PGPfire package. In doing so, it makes it easier to identify the operating system of the host. This is due to the fact that the altered TCP stack produces responses uncharacteristic of any other operating system.
This could allow a remote user to fingerprint and identify sensitive information systems, and could result in an organized attack against sensitive resources.
PGPfire is a desktop firewall solution distributed and maintained by PGP Security. It is available for Microsoft Windows operating systems.
When PGPfire is installed on a system, the software replaces the default Windows TCP stack with a version supplied in the PGPfire package. In doing so, it makes it easier to identify the operating system of the host. This is due to the fact that the altered TCP stack produces responses uncharacteristic of any other operating system.
This could allow a remote user to fingerprint and identify sensitive information systems, and could result in an organized attack against sensitive resources.
Exploit / POC
PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PGPFire Desktop Firewall ICMP Fingerprinting Vulnerability
References:
References: