PT-2002-2646 · Tiny · Tiny Personal Firewall

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Tiny Personal Firewall versions 3.0 through 3.0.6

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing SYN, UDP, ICMP, and TCP port scans. This occurs when the administrator selects the Log tab of the Personal Firewall Agent module.

Recommendations For Tiny Personal Firewall versions 3.0 through 3.0.6, consider disabling the Log tab of the Personal Firewall Agent module to prevent potential denial of service attacks until a fix is available.

Correção

Identificadores relacionados

CVE-2002-1925

Produtos afetados

Tiny Personal Firewall

Referências · 4

• http://iss.net/security_center/static/9918.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1925 · Nota de Segurança
• http://securityfocus.com/bid/5525 · Nota
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00298.html · Aviso do Fabricante