Novell BorderManager Multiple Vulnerabilities

Bugtraq ID:	8308
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 06 2003 12:00AM
Updated:	Mar 06 2003 12:00AM
Credit:	These issues were announced by the vendor.
Vulnerable:	Novell BorderManager 3.7 SP1 Novell BorderManager 3.7
Not Vulnerable:	Novell BorderManager 3.7 SP2

Novell BorderManager Multiple Vulnerabilities

Novell has released BorderManager 3.7 Support Pack 2 to address a number of potential security issues, including lack of adequate filtering of certain types of traffic such as TCP Push Attacks, attempts to exploit FTP PASV issues and attacks which rely on repeated ICMP error replies being sent through the firewall. Previous versions also did not provide sufficient facilities for logging HTTPS traffic or certain ICMP messages. The overall impact is that some types of traffic may bypass detection and filtering by BorderManager.

Novell BorderManager Multiple Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell BorderManager Multiple Vulnerabilities

Solution:
Novell has addressed these issues in BorderManager 3.7 Support Pack 2. Instructions on how to apply updates are included in the attached Novell BorderManager 3.7 Support Pack 2 (TID2965474) bulletin.


Novell BorderManager 3.7

• Novell bm37sp2.exe
  Border Manager 3.7 Support Pack 2
  http://support.novell.com/servlet/filedownload/sec/pub/bm37sp2.exe

Novell BorderManager 3.7 SP1

• Novell bm37sp2.exe
  Border Manager 3.7 Support Pack 2
  http://support.novell.com/servlet/filedownload/sec/pub/bm37sp2.exe

Novell BorderManager Multiple Vulnerabilities

References:

• BorderManager 3.7 Support Pack 2 - TID2965474 (Novell)