PT-2001-1540 · Borderware · Borderware Firewall Server

Publicado 2001-04-04 · Atualizado 2017-12-19 · CVE-2001-0313

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Borderware Firewall Server version 6.1.2

Description The issue allows remote attackers to cause a denial of service by sending a ping to the broadcast address of the public network where the server is located. This action causes the server to continuously send pings (echo requests) to the network.

Recommendations For Borderware Firewall Server version 6.1.2, consider restricting access to the broadcast address of the public network to minimize the risk of exploitation. As a temporary workaround, consider configuring the server to ignore ping requests to the broadcast address until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2001-0313

Produtos afetados

Borderware Firewall Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-0313 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=98053139231392&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6004 · Nota