PT-2002-2646 · Tiny · Tiny Personal Firewall

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1925

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Tiny Personal Firewall versions 3.0 through 3.0.6

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by utilizing SYN, UDP, ICMP, and TCP port scans. This occurs when the administrator selects the Log tab of the Personal Firewall Agent module.

Recommendations For Tiny Personal Firewall versions 3.0 through 3.0.6, consider disabling the Log tab of the Personal Firewall Agent module to prevent potential denial of service attacks until a fix is available.

Fix

Related Identifiers

CVE-2002-1925

Affected Products

Tiny Personal Firewall

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1925 · Security Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00298.html · Vendor Advisory
• http://iss.net/security_center/static/9918.php · Note
• http://securityfocus.com/bid/5525 · Note