SonicWALL Pro Large HTTP POST Denial of Service Vulnerability

Bugtraq ID:	7435
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 25 2003 12:00AM
Updated:	Apr 25 2003 12:00AM
Credit:	This vulnerability was reported by Greg Smith <[email protected]>.
Vulnerable:	SonicWALL PRO300 SonicWALL PRO200 SonicWALL PRO100
Not Vulnerable:

SonicWALL Pro Large HTTP POST Denial of Service Vulnerability

The SonicWALL Pro firewall is reported to be prone to a denial of service condition when an unusually large HTTP POST is sent to the internal interface. The firewall device will reset, resulting in a loss of availability while it goes through this cycle. This may be the result of a buffer being overrun, however, this has not been confirmed.

SonicWALL Pro Large HTTP POST Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SonicWALL Pro Large HTTP POST Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SonicWALL Pro Large HTTP POST Denial of Service Vulnerability

References:

• ViewPoint Homepage (SonicWALL)
  
• SonicWall Pro DoS? (Greg Smith )