PT-2001-1540 · Borderware · Borderware Firewall Server

Published 2001-04-04 · Updated 2017-12-19 · CVE-2001-0313

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Borderware Firewall Server version 6.1.2

Description The issue allows remote attackers to cause a denial of service by sending a ping to the broadcast address of the public network where the server is located. This action causes the server to continuously send pings (echo requests) to the network.

Recommendations For Borderware Firewall Server version 6.1.2, consider restricting access to the broadcast address of the public network to minimize the risk of exploitation. As a temporary workaround, consider configuring the server to ignore ping requests to the broadcast address until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2001-0313

Affected Products

Borderware Firewall Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2001-0313 · Security Note
• http://marc.info/?l=bugtraq&m=98053139231392&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6004 · Note