Denial of Service against Gauntlet-Firewall / SQL-Gateway

DOS-Attack against Gauntlet Firewall ------------------------------------- We found out a security-issue with the Oracle-Proxy SQL-Gateway of Gauntlet Firewall, Version 6 manufactured by Secure Computing/NAI, serversrunning Solaris 8, newest Patches installed. Abstract: --------- Sending subseque...

fw1-pasv.txt

Multiple firewalls: FTP Application Level Gateway "PASV" Vulnerability Synopsis -------- It is possible to cause certain firewalls to open up any TCP port of your choice against FTP servers that are "protected" by those firewalls. This is done by fooling the FTP server into echoing "227 PASV"...