Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability
BID:4660
Info
Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability
| Bugtraq ID: | 4660 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-0604 |
| Remote: | Yes |
| Local: | No |
| Published: | May 02 2002 12:00AM |
| Updated: | Jul 11 2009 12:46PM |
| Credit: | Andreas Sandor ([email protected]) & Peter Gründl ([email protected]). |
| Vulnerable: |
Snapgear Lite+ Firewall 1.5.4 Snapgear Lite+ Firewall 1.5.3 |
| Not Vulnerable: |
Snapgear Lite+ Firewall 1.6 .0 |
Exploit / POC
Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability
There is no exploit code required.
There is no exploit code required.
Solution / Fix
Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability
Solution:
The vendor has released a firmware upgrade.
Snapgear Lite+ Firewall 1.5.3
Snapgear Lite+ Firewall 1.5.4
Solution:
The vendor has released a firmware upgrade.
Snapgear Lite+ Firewall 1.5.3
-
Snapgear SnapGearLITE_LITE+_v1.6.0_20020429_imagez.bin
Linux version.
http://www.snapgear.com/ftp/snapgear/firmware/SnapGearLITE_LITE+_v1.6. 0_20020429_imagez.bin -
Snapgear SnapGearLITE_LITE+_v1.6.0_20020429_netflash.exe
Windows version.
http://www.snapgear.com/ftp/snapgear/firmware/SnapGearLITE_LITE+_v1.6. 0_20020429_netflash.exe
Snapgear Lite+ Firewall 1.5.4
-
Snapgear SnapGearLITE_LITE+_v1.6.0_20020429_imagez.bin
Linux version.
http://www.snapgear.com/ftp/snapgear/firmware/SnapGearLITE_LITE+_v1.6. 0_20020429_imagez.bin -
Snapgear SnapGearLITE_LITE+_v1.6.0_20020429_netflash.exe
Windows version.
http://www.snapgear.com/ftp/snapgear/firmware/SnapGearLITE_LITE+_v1.6. 0_20020429_netflash.exe
References
Snapgear Lite+ Firewall IP-OPTIONS Denial of Service Vulnerability
References:
References:
- Snapgear Homepage (Snapgear)