CVE

Id
2268  
CVE No.
CVE-2000-0692  
Status
Candidate  
Description
ISS RealSecure 3.2.1 and 3.2.2 allows remote attackers to cause a denial of service via a flood of fragmented packets with the SYN flag set.  
Phase
Modified (20001010-1)  
Votes
ACCEPT(2) Cole, Levy | MODIFY(1) Frech | NOOP(1) Wall | REVIEWING(1) Christey  
Comments
Frech> XF:realsecure-rskill-dos | Christey> CHANGEREF XF:realsecure-rskill-dos to XF:realsecure-frag-syn-dos? | http://xforce.iss.net/static/5133.php | CHANGE> [Christey changed vote from NOOP to REVIEWING] | Christey> In an email to issforum@iss.net on September 7, 2000, ISS says | that Network Sensor 3.2.2 is affected by SYN flooding, but | RealSecure 5.0 is not affected by Syn flooding. In addition, | they could not find conclusive evidence that RS 3.2.2 or 5.0 | was affected by IP fragmentation. This seems to indicate | that there are 2 *possible* problems: syn flooding (acknowledged | by ISS) and fragmentation (unconfirmed). Perhaps this | candidate needs to be split, or its description should be | rewritten to separate the 2 reported problems. | Frech> XF:realsecure-rskill-dos(5133)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
8161 2268 CVE-2000-0692 BUGTRAQ:20000822 DOS on RealSecure 3.2  View
8162 2268 CVE-2000-0692 URL:http://archives.neohapsis.com/archives/bugtraq/2000-08/0267.html  View
8163 2268 CVE-2000-0692 BID:1597  View
8164 2268 CVE-2000-0692 URL:http://www.securityfocus.com/bid/1597  View

Related JVN