WatchGuard Firebox Dynamic VPN Configuration Protocol Denial Of Service Vulnerability

Bugtraq ID:	5186
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 09 2002 12:00AM
Updated:	Jul 09 2002 12:00AM
Credit:	Discovery credited to Peter Gründl ([email protected]) and Andreas Sandor ([email protected]).
Vulnerable:	WatchGuard SOHO Firewall 5.0.35 a WatchGuard SOHO Firewall 5.0.35 WatchGuard SOHO Firewall 5.0.31 WatchGuard SOHO Firewall 5.0.29 WatchGuard SOHO Firewall 5.0.28 WatchGuard Firebox Firmware 5.0
Not Vulnerable:	WatchGuard Firebox Firmware 6.0 .b1140

WatchGuard Firebox Dynamic VPN Configuration Protocol Denial Of Service Vulnerability

A denial of service vulnerability has been reported for WatchGuard Firebox firmware versions 5.x.x. The vulnerability occurs in the DVCP service. It is possible for a remote attacker to submit a malformed request to the DVCP service and cause it to crash thereby denying service to legitimate users of the Firebox device.

WatchGuard Firebox Dynamic VPN Configuration Protocol Denial Of Service Vulnerability

Solution:
The vendor has strongly suggested that users upgrade to firmware version 6.0.b1140 which addresses this issue. Customers should contact the vendor for upgrades.

WatchGuard Firebox Dynamic VPN Configuration Protocol Denial Of Service Vulnerability

References:

• WatchGuard Homepage (WatchGuard)