PT-2006-1995 · Nufw · Nufw

Published 2006-03-02 · Updated 2011-03-08 · CVE-2006-0956

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions NuFW versions prior to 1.0.21

Description The issue arises from improper handling of blocking TLS sockets in nuauth, allowing remote authenticated users to cause a denial of service by flooding packets at the authentication server.

Recommendations For versions prior to 1.0.21, update to version 1.0.21 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-0956

Affected Products

Nufw

References · 5

• http://nufw.org/+NuFW-1-21-minor-security-fix+.html · Vendor Advisory
• http://secunia.com/advisories/19046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0956 · Security Note
• http://vupen.com/english/advisories/2006/0762 · Note
• http://securityfocus.com/bid/16868 · Note