xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

Network Associates Gauntlet Firewall 存在远程溢出


发布时间:2000-05-17
更新时间:2000-05-17
严重程度:
威胁程度:远程拒绝服务
错误类型:设计错误
利用方式:服务器模式

受影响系统
Network Associates Gauntlet Firewall 5.5;5.0;4.2;4.1
详细描述
Network Associates Gauntlet firewall中的Mattel's Cyber Patrol过滤程序存在安全问题,默认安装中, Mattel's Cyber Patrol有30天的使用期,但使用期过后,这个过滤程序就停止工作,这样就存在安全问题,就是说攻击者使用Gauntlet Firewalls进入共同的网络内部。

测试代码
尚无

解决方案
下载补丁程序:

Network Associates Gauntlet Firewall 5.5:

NAI patch Gauntlet Firewall for Unix and WebShield cyberdaemon Buffer Overflow Vulnerability Advisory
http://www.tis.com/support/cyberadvisory.html

NAI patch Gauntlet 5.5 cyber.patch
http://download.nai.com/products/patches/gauntlet/5.5/cyber.patch

Network Associates Gauntlet Firewall 5.0:

NAI patch Gauntlet Firewall for Unix and WebShield cyberdaemon Buffer Overflow Vulnerability Advisory
http://www.tis.com/support/cyberadvisory.html

NAI patch Gauntlet 5.0 cyber.patch
http://download.nai.com/products/patches/gauntlet/5.0/cyber.patch

Network Associates Gauntlet Firewall 4.2:

NAI patch Gauntlet Firewall for Unix and WebShield cyberdaemon Buffer Overflow Vulnerability Advisory
http://www.tis.com/support/cyberadvisory.html

NAI patch Gauntlet 4.2 cyber.patch
http://download.nai.com/products/patches/gauntlet/4.2/cyber.patch

Network Associates Gauntlet Firewall 4.1:

NAI patch Gauntlet Firewall for Unix and WebShield cyberdaemon Buffer Overflow Vulnerability Advisory
http://www.tis.com/support/cyberadvisory.html

Network Associates WebShield E-ppliance 300.0:

NAI patch WebShield 300 cyber.patch
http://download.nai.com/products/patches/WebShield/W300/cyber.patch

Network Associates WebShield E-ppliance 100.0:

NAI patch WebShield 100 cyber.patch
http://download.nai.com/products/patches/WebShield/W100/cyber.patch

Network Associates WebShield for Solaris 4.0:

NAI patch WS4.0 cyber.patch
http://download.nai.com/products/patches/WebShield/Wfs40/cyber.patch

相关信息