[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[SCO] Schwachstelle in tcp_sec - CSSA-2003-019.0
-----BEGIN PGP SIGNED MESSAGE-----
Liebe Kolleginnen und Kollegen,
soeben erreichte uns nachfolgende Warnung von Caldera International
Inc. ueber Sicherheitsprobleme bei "tcp_sec". Wir geben diese
Informationen unveraendert an Sie weiter.
Durch einen Fehler im Paket tcp_sec werden eingehende TCP-Pakete mit
gleichzeitig gesetztem SYN- und FIN-Flag nicht verworfen. Somit
koennte es einem Angreifer gelingen, mit solchen Paketen die Regeln
einer Firewall zu umgehen.
Betroffen ist
tcp_sec bis ausschliesslich tcp_sec-1.0-1.i386.rpm
in
OpenLinux 3.1 Server und Workstation
OpenLinux 3.1.1 Server und Workstation
(c) der deutschen Zusammenfassung bei DFN-CERT GmbH; die Verbreitung,
auch auszugsweise, ist nur unter Hinweis auf den Urheber, DFN-CERT
GmbH, und nur zu nicht kommerziellen Zwecken gestattet.
Mit freundlichen Gruessen,
Marco Thorbruegge, DFN-CERT
- --
Marco Thorbruegge | mailto:thorbruegge@xxxxxxxxxxx
DFN-CERT GmbH | http://www.cert.dfn.de/team/matho/
Heidenkampsweg 41 | Phone: +49(40)808077-555
D-20097 Hamburg/Germany | FAX: +49(40)808077-556
PGP-Key: 0xAE662425 Fingerpr.: 7E5C A77A F91D 63D1 02AB 9526 53FF F1A0
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
______________________________________________________________________________
SCO Security Advisory
Subject: OpenLinux: tcp SYN with FIN packets are not discarded
Advisory number: CSSA-2003-019.0
Issue date: 2003 April 28
Cross reference:
______________________________________________________________________________
1. Problem Description
Allowing TCP packets with both the SYN and FIN bits set
significantly improve an attacker's chances of circumventing
a firewall.
2. Vulnerable Supported Versions
System Package
----------------------------------------------------------------------
OpenLinux 3.1.1 Server prior to tcp_sec-1.0-1.i386.rpm
OpenLinux 3.1.1 Workstation prior to tcp_sec-1.0-1.i386.rpm
OpenLinux 3.1 Server prior to tcp_sec-1.0-1.i386.rpm
OpenLinux 3.1 Workstation prior to tcp_sec-1.0-1.i386.rpm
3. Solution
The proper solution is to install the latest packages. Many
customers find it easier to use the Caldera System Updater, called
cupdate (or kcupdate under the KDE environment), to update these
packages rather than downloading and installing them by hand.
4. OpenLinux 3.1.1 Server
4.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-019.0/RPMS
4.2 Packages
57270040e72d49ac888b9967cc86cac8 tcp_sec-1.0-1.i386.rpm
4.3 Installation
rpm -Fvh tcp_sec-1.0-1.i386.rpm
4.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Server/CSSA-2003-019.0/SRPMS
4.5 Source Packages
acee43450be1a90b11bfc6049e9b788e tcp_sec-1.0-1.src.rpm
5. OpenLinux 3.1.1 Workstation
5.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-019.0/RPMS
5.2 Packages
24b4643542d6c0fbd6b8dc18462fb99e tcp_sec-1.0-1.i386.rpm
5.3 Installation
rpm -Fvh tcp_sec-1.0-1.i386.rpm
5.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1.1/Workstation/CSSA-2003-019.0/SRPMS
5.5 Source Packages
a20384e0690e90a6d0528dd3bb4b9843 tcp_sec-1.0-1.src.rpm
6. OpenLinux 3.1 Server
6.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2003-019.0/RPMS
6.2 Packages
bcd89ad8d189087628d0d00141a768ef tcp_sec-1.0-1.i386.rpm
6.3 Installation
rpm -Fvh tcp_sec-1.0-1.i386.rpm
6.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Server/CSSA-2003-019.0/SRPMS
6.5 Source Packages
99a233d89194694c0504bdcd87a98561 tcp_sec-1.0-1.src.rpm
7. OpenLinux 3.1 Workstation
7.1 Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2003-019.0/RPMS
7.2 Packages
afa62e4d5dedf317f7200fcaa8e24eda tcp_sec-1.0-1.i386.rpm
7.3 Installation
rpm -Fvh tcp_sec-1.0-1.i386.rpm
7.4 Source Package Location
ftp://ftp.sco.com/pub/updates/OpenLinux/3.1/Workstation/CSSA-2003-019.0/SRPMS
7.5 Source Packages
55168baaa23dae4c3344dd0af1dbde96 tcp_sec-1.0-1.src.rpm
8. References
Specific references for this advisory:
http://www.securityfocus.com/archive/1/296122/2002-10-19/2002-10-25/2
http://www.kb.cert.org/vuls/id/464113
SCO security resources:
http://www.sco.com/support/security/index.html
This security fix closes SCO incidents sr876423, fz527624,
erg712275.
9. Disclaimer
SCO is not responsible for the misuse of any of the information
we provide on this website and/or through our security
advisories. Our advisories are a service to our customers intended
to promote secure installation and use of SCO products.
10. Acknowledgements
Paul Starzetz discovered and researched this vulnerability.
______________________________________________________________________________
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iEYEARECAAYFAj6taXQACgkQbluZssSXDTFPjQCdFsGp3zNx3dlwD+JsvYv9sGzb
bDgAoLKq6zJW+554hulWgKyEZ+wuoN9S
=Iu+G
- -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2i
iQEVAgUBPrZfxnsh3gGuZiQlAQE7lgf/byOlfUdpnJVb8zfuAva8gl4azJkEMOOp
NSMW4FYXN2k3hlKLPhY6/5E9NGOyDlC5pCJNeGncpQKgPKGFcXEhFegd6I+urXkr
SKLvQ8hq2TCtpa8jOTjVkpFmn4VdSIhs7C9IKeGVkpwMcRol9JU3LiSuDQnZ+LtW
tBRWCnBLDTGrnGhcL1lFdkhHiUPrzlTxqBuF+ln/SbtNB0pXLnEDas3HRtBp8MiW
ke7BpcTRhZNmWuQARYz+YlkAHl5YotuTopMLi6fE3liWD/7rFW07ONT3eCtqwDLC
DHzYsMgq+p9/XJEdbU828HxqcrCU7lV1u1SWF79av0oVSfBX7tL0ww==
=NHfO
-----END PGP SIGNATURE-----