Lucent Brick ARP Traffic Forwarding Vulnerability
BID:5338
Info
Lucent Brick ARP Traffic Forwarding Vulnerability
| Bugtraq ID: | 5338 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2002 12:00AM |
| Updated: | Jul 27 2002 12:00AM |
| Credit: | Vulnerability discovery credited to FX <[email protected]> and kim0 <[email protected]>. |
| Vulnerable: |
Lucent VPN Firewall Brick 80 Lucent VPN Firewall Brick 201 Lucent VPN Firewall Brick 20 Lucent VPN Firewall Brick 1000 |
| Not Vulnerable: | |
Discussion
Lucent Brick ARP Traffic Forwarding Vulnerability
Brick is the firewall and VPN management system distributed by Lucent. It is a hardware/firmware solution.
It has been reported that Brick systems forward ARP traffic across interfaces, regardless of any defined firewall rulesets. This could allow a system local to the Brick to send ARP traffic across interfaces, and potentially deny service to other hosts local to the Brick system.
Lucent has reported that this behavior will not occur if the interfaces of the Brick device are bound to different IP subnets.
Brick is the firewall and VPN management system distributed by Lucent. It is a hardware/firmware solution.
It has been reported that Brick systems forward ARP traffic across interfaces, regardless of any defined firewall rulesets. This could allow a system local to the Brick to send ARP traffic across interfaces, and potentially deny service to other hosts local to the Brick system.
Lucent has reported that this behavior will not occur if the interfaces of the Brick device are bound to different IP subnets.
Exploit / POC
Lucent Brick ARP Traffic Forwarding Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Lucent Brick ARP Traffic Forwarding Vulnerability
Solution:
Lucent reports that VPN Firewall 7.0 will provide additional security features which mitigate this issue. Reportedly, VPN Firewall 7.0 is scheduled for release in September 2002.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Lucent reports that VPN Firewall 7.0 will provide additional security features which mitigate this issue. Reportedly, VPN Firewall 7.0 is scheduled for release in September 2002.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.