NetScreen H.323 Control Session Denial Of Service Vulnerability

Bugtraq ID:	6250
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 25 2002 12:00AM
Updated:	Nov 25 2002 12:00AM
Credit:	Discovery of this vulnerability credited to Stephen Gill.
Vulnerable:	NetScreen ScreenOS 4.0 NetScreen ScreenOS 3.1.1 r2 NetScreen ScreenOS 3.1 r9 NetScreen ScreenOS 3.1 r2 NetScreen ScreenOS 3.1 r1 NetScreen ScreenOS 3.1 NetScreen ScreenOS 3.0.3 r1.1 NetScreen ScreenOS 3.0.1 r2 NetScreen ScreenOS 3.0.1 r1 NetScreen ScreenOS 3.0 r4 NetScreen ScreenOS 3.0 r3 NetScreen ScreenOS 3.0 r2 NetScreen ScreenOS 3.0 r1 NetScreen ScreenOS 3.0 NetScreen ScreenOS 2.8 r1 NetScreen ScreenOS 2.8
Not Vulnerable:	NetScreen ScreenOS 4.0.1

NetScreen H.323 Control Session Denial Of Service Vulnerability

A denial of service vulnerability has been reported for all NetScreen appliances related to the processing of H.323 control sessions. The vulnerability is due to inadequate clean up of existing, half-open H.323 control sessions that can eventually result in the consumption of all firewall session table entries.

This vulnerability has been reported to only affect NetScreen appliance configurations that explicitly permit the forwarding of H.323 or Netmeeting traffic.

NetScreen H.323 Control Session Denial Of Service Vulnerability

References:

• NetScreen Homepage (NetScreen)
  
• NetScreen Security Alert 52020 (NetScreen)