PT-2000-1625 · Iss · Iss Realsecure

Publicado 2000-10-20 · Atualizado 2008-09-05 · CVE-2000-0692

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ISS RealSecure versions 3.2.1 through 3.2.2

Description The issue allows remote attackers to cause a denial of service by flooding the system with fragmented packets that have the SYN flag set.

Recommendations For ISS RealSecure versions 3.2.1 and 3.2.2, consider implementing measures to limit the impact of fragmented packet floods, such as configuring firewall rules to restrict excessive SYN flag packets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2000-0692

Produtos afetados

Iss Realsecure

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html · Exploit
• http://securityfocus.com/bid/1597 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0692 · Nota de Segurança