Raptor Firewall Zero Length UDP Packet Resource Consumption Vulnerability

Bugtraq ID: 3509
Class: Failure to Handle Exceptional Conditions
CVE:
Remote: Yes
Local: No
Published: Nov 05 2001 12:00AM
Updated: Nov 05 2001 12:00AM
Credit: This vulnerability was disclosed by Max Moser <mmo@phase1.ch> on November 5, 2001.
Vulnerable: Symantec VelociRaptor 1.1
Symantec VelociRaptor 1.0
Symantec Raptor Firewall 6.5 Windows NT
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Symantec Raptor Firewall 6.0.3 HP-UX
- HP HP-UX 11.0
Symantec Raptor Firewall 6.0.2 Windows NT
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Symantec Raptor Firewall 6.0.2 Solaris
- Sun Solaris 2.6
Symantec Raptor Firewall 5.0.3 Windows NT
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0
Symantec Raptor Firewall 4.0 .0 HP-UX
- HP HP-UX 10.20
Not Vulnerable: Symantec Raptor Firewall 6.5.3 Solaris
- Sun Solaris 7.0
- Sun Solaris 2.6
Symantec Raptor Firewall 6.5.1 Solaris
- Sun Solaris 7.0
- Sun Solaris 2.6
Symantec Enterprise Firewall 6.5.2 NT/2000
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Professional SP3
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows NT 4.0 SP2
- Microsoft Windows NT 4.0 SP1
- Microsoft Windows NT 4.0


 

Privacy Statement
Copyright 2010, SecurityFocus