fwmon Oversized Packet Denial of Service Vulnerability
BID:3984
Info
fwmon Oversized Packet Denial of Service Vulnerability
| Bugtraq ID: | 3984 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 25 2002 12:00AM |
| Updated: | Jan 25 2002 12:00AM |
| Credit: | Published in the fwmon release notes for version 1.0.10. |
| Vulnerable: |
fwmon fwmon 1.0.9 |
| Not Vulnerable: |
fwmon fwmon 1.0.10 |
Discussion
fwmon Oversized Packet Denial of Service Vulnerability
fwmon is a firewall monitoring tool. It works with the Linux operating system, and either iptables or ipchains. It is able to provide more detailed information on network traffic than the standard ipchains log.
It is possible for some versions of fwmon to crash when the kernel sends an oversized packet. If an attacker were able to exploit this condition, it may be possible to create a denial of service condition. If firewall monitoring is disrupted, further attacks against the host would go undetected. This would not impact the effectiveness of the firewall, only the quality of the log data.
fwmon is a firewall monitoring tool. It works with the Linux operating system, and either iptables or ipchains. It is able to provide more detailed information on network traffic than the standard ipchains log.
It is possible for some versions of fwmon to crash when the kernel sends an oversized packet. If an attacker were able to exploit this condition, it may be possible to create a denial of service condition. If firewall monitoring is disrupted, further attacks against the host would go undetected. This would not impact the effectiveness of the firewall, only the quality of the log data.
Exploit / POC
fwmon Oversized Packet Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
fwmon Oversized Packet Denial of Service Vulnerability
Solution:
Version 1.0.10 of fwmon does not have this problem:
fwmon fwmon 1.0.9
Solution:
Version 1.0.10 of fwmon does not have this problem:
fwmon fwmon 1.0.9
-
fwmon fwmon-1.0.10.tar.gz
http://freshmeat.net/redir/fwmon/2713/url_tgz/fwmon-1.0.10.tar.gz