Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Security Hole found in NAI Firewall
Kevin Poulsen, SecurityFocus 2000-05-22

Censorware gaffe turns "World's Most Secure Firewall" into an open door.

Comments Mode:
The key is not "quick response" 2000-05-22
Anonymous (1 replies)
Quick Response is a 'MUST' 2000-05-22
Anonymous (2 replies)
Quick Response is a 'MUST' 2000-05-24
Anonymous
Quick Response is a 'MUST' 2000-05-26
Anonymous
This is HUGE 2000-05-22
Anonymous
NAI and Gauntlet 2000-05-23
Anonymous
Security in depth is a good policy 2000-05-23
Anonymous (1 replies)
Security in depth is a good policy 2000-05-24
Anonymous
"These problems are an anoyance rather than a security compromise if the network is configured correctly in the first place."

Are you kidding? You think a firewall being hacked with a buffer overflow is an anoyance rather then a security compromise? Please explain what a security compromise is then. I agree that a firewall should not be your only line of defense but at the same time, a company should be able to expect a certain level of security from the firewall. Many companies don't have the money to bring in full time security staff and they are left to trust the vendors who install the security devices. So a company that gets hacked due to this hole is at fault since they didnt have ACL's on the router? Ok, while we are at it, lets blame the company for also not hacking the kernel to have MAC.

Come on now, sure there is more to security then just a firewall but an exploit with this kind of power -IS- a security compromise.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/40/2017#2017
No comment! 2000-05-24
Anonymous
The scary thing... 2000-05-26
Anonymous
Simplicity 2000-05-29
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus