Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability

Bugtraq ID:	8681
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 23 2003 12:00AM
Updated:	Sep 23 2003 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	Ingate SIParator 3.2 Ingate Firewall 3.2
Not Vulnerable:	Ingate SIParator 3.2.1 Ingate Firewall 3.2.1

Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability

Ingate Firewall/SIParator products have been reported prone to a TCP packet filter bypass vulnerability under some circumstances.

The issue presents itself if TCP packet filtering is being used in the affected software. A malicious packet containing certain set flags that passes through the firewall in the reply direction, may bypass packet-filtering rules on the affected firewall.

Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability

Solution:
The vendor has released an upgrade to address this issue:


Ingate SIParator 3.2

• Ingate Ingate Firewall 3.2.1 and Ingate SIParator 3.2.1
  http://www.ingate.com/relnote-321.php

Ingate Firewall 3.2

• Ingate Ingate Firewall 3.2.1 and Ingate SIParator 3.2.1
  http://www.ingate.com/relnote-321.php

Ingate Firewall/SIParator Packet Filter Rule Bypass Vulnerability

References:

• Release notice for Ingate Firewall 3.2.1 and Ingate SIParator 3.2.1 (Ingate)