Symantec VelociRaptor Denial of Service Vulnerability

Bugtraq ID:	5909
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 07 2002 12:00AM
Updated:	Oct 07 2002 12:00AM
Credit:	Vulnerability reported by Symantec.
Vulnerable:	Symantec VelociRaptor 1300 Symantec VelociRaptor 1200 Symantec VelociRaptor 1.5 Symantec VelociRaptor 1.1 Symantec VelociRaptor 1.0
Not Vulnerable:

Symantec VelociRaptor Denial of Service Vulnerability

Symantec has reported that VelociRaptor firewalls are vulnerable to a memory leak bug, that could potentially result in a denial of service attack. Other security issues may also exist that were also corrected by the fix.

Precise technical details regarding this bug are still unknown. Updates will occur as more information regarding this issue becomes available.

Symantec VelociRaptor Denial of Service Vulnerability

Solution:
Fixes available:


Symantec VelociRaptor 1200

• Symantec SG7000-20020819-00 - ftpd httpd nntpd and vpn driver
  ftp://ftp.symantec.com/public/updates/security-vr15-3des.zip

Symantec VelociRaptor 1300

• Symantec SG7000-20020819-00 - ftpd httpd nntpd and vpn driver
  ftp://ftp.symantec.com/public/updates/security-vr15-3des.zip

Symantec VelociRaptor 1.0

• Symantec SG6500-20020819-01 - httpd nntpd and vpn driver
  ftp://ftp.symantec.com/public/updates/security-vr0-3des.zip

Symantec VelociRaptor 1.1

• Symantec SG6501-20020819-00 - httpd nntpd and vpn driver
  ftp://ftp.symantec.com/public/updates/security-vr1-3des.zip

Symantec VelociRaptor 1.5

• Symantec SG7000-20020819-00 - ftpd httpd nntpd and vpn driver
  ftp://ftp.symantec.com/public/updates/security-vr15-3des.zip

Symantec VelociRaptor Denial of Service Vulnerability

References:

• Symantec VelociRaptor 1.0 (change product) (Symantec)