Firewall-1 Port 0 Denial of Service Vulnerability

Bugtraq ID:	576
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 09 1999 12:00AM
Updated:	Aug 09 1999 12:00AM
Credit:	This vulnerability was forwarded to the Bugtraq mailing list by Malikai <[email protected]> on Sun Aug 08 1999.
Vulnerable:	Check Point Software Firewall-1 4.0 Check Point Software Firewall-1 3.0
Not Vulnerable:

Firewall-1 Port 0 Denial of Service Vulnerability

There is a known bug with FireWall-1 relating to UDP packets traveling through VPN-1 destined to any host at port 0. This issue only seems to take place when the VPN being used for the transport of the packet supports ISAKMP encryption. It has been reported that Solaris hosts being attacked via this method will reboot.

Firewall-1 Port 0 Denial of Service Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Firewall-1 Port 0 Denial of Service Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Firewall-1 Port 0 Denial of Service Vulnerability

References:

• Firewall-1 Connection Table Paper (Lance Spitzner)