Pyramid BenHur Default Firewall Weakness

Bugtraq ID:	5279
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 22 2002 12:00AM
Updated:	Jul 22 2002 12:00AM
Credit:	Discovery credited to Dr. Peter Bieringer <pbieringer (at) aerasec.de>.
Vulnerable:	Pyramid BenHur Software Update 66 + Pyramid BenHur
Not Vulnerable:	Pyramid BenHur Software Update 67 + Pyramid BenHur

Pyramid BenHur Default Firewall Weakness

A vulnerability has been reported for the BenHur device. Reportedly, the device has a weak default firewall configuration ruleset. It is possible for an attacker to connect to any port between 1024 and 65096 on the the device provided the source port is TCP port 20. This is due to a poorly designed rule that was put in place to support FTP data connections.

Pyramid BenHur Default Firewall Weakness

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Pyramid BenHur Default Firewall Weakness

Solution:
The vendor has released a software update to address this vulnerability:


Pyramid BenHur Software Update 66

• Pyramid BenHur Software Update 67
  https://www.ben-hur.de/updates_experimental

Pyramid BenHur Default Firewall Weakness

References:

• BenHur Product Page (Pyramid)
  
• Pyramid Homepage (Pyramid)