OpenLinux TCP_Sec TCP Packet Filtering Weakness

Bugtraq ID:	7487
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 18 2002 12:00AM
Updated:	Oct 18 2002 12:00AM
Credit:	Thed discovery of this vulnerability has been credited to Paul Starzetz <[email protected]>.
Vulnerable:	Caldera OpenLinux Workstation 3.1.1 Caldera OpenLinux Workstation 3.1 Caldera OpenLinux Server 3.1.1 Caldera OpenLinux Server 3.1
Not Vulnerable:

OpenLinux TCP_Sec TCP Packet Filtering Weakness

A weakness has been discovered in tcp_sec implementations for OpenLinux while filtering TCP packets. Specifically, an attacker may be capable of bypassing network firewall policies by setting both the SYN and FIN flags within a malformed TCP packet. This may make it possible for an attacker to establish a session with a service that could otherwise be inaccessible.

OpenLinux TCP_Sec TCP Packet Filtering Weakness

No exploit is required.

OpenLinux TCP_Sec TCP Packet Filtering Weakness

Solution:
SCO has released a security advisory (CSSA-2003-019.0) containing fixes for OpenLinux.

Fixes:


Caldera OpenLinux Server 3.1

• SCO tcp_sec-1.0-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2003-019.0/RPM S

Caldera OpenLinux Workstation 3.1

• SCO tcp_sec-1.0-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2003-019. 0/RPMS

Caldera OpenLinux Server 3.1.1

• SCO tcp_sec-1.0-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-019.0/R PMS

Caldera OpenLinux Workstation 3.1.1

• SCO tcp_sec-1.0-1.i386.rpm
  ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-01 9.0/RPMS

OpenLinux TCP_Sec TCP Packet Filtering Weakness

References: