Symantec Norton Personal Firewall 2002 Fragmented Packet Vulnerability

Bugtraq ID:	4545
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 16 2002 12:00AM
Updated:	Apr 16 2002 12:00AM
Credit:	Discovered by Alfonso Fiore <[email protected]>.
Vulnerable:	Symantec Norton Personal Firewall 2002
Not Vulnerable:

Symantec Norton Personal Firewall 2002 Fragmented Packet Vulnerability

Symantec Norton Personal Firewall 2002 (NPW)is a firewall for home and small office machines based on some versions of the Microsoft Windows operating systems.

It has been reported that NPW may not adequately filter packet fragments. In particular, denial of service attacks based on fragmented packets have been reported to work effectively against systems protected by NPW. This may happen even if the attacking address is entirely blocked from the system.

These issues have not been confirmed.

Symantec Norton Personal Firewall 2002 Fragmented Packet Vulnerability

Solution:
Symantec has acknowledged this issue and recommends that Windows 2000 Service Pack 1 or later be installed. Microsoft Windows 2000 SP1 or later is not susceptible to this issue.

Symantec Norton Personal Firewall 2002 Fragmented Packet Vulnerability

References:

• Norton Personal Firewall Homepage (Symantec)
  
• Symantec Norton Personal Firewall 2002 SYN/FIN scan issue (Symantec)
  
• Windows Update (Microsoft)