bugtraq - Re: Checkpoint SYN DoS Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BAY108-F137C62B6B1127D5C3EFE56CCA00@phx.gbl>
Date: Tue, 16 May 2006 18:33:05 -0400
From: "sanjay naik" <sanjaynaik@...mail.com>
To: dhenning@....com, pawel.worach@...il.com
Cc: bugtraq@...urityfocus.com
Subject: Re: Checkpoint SYN DoS Vulnerability

Hi David,

The firewalls are not configured to confuse the scanner. The configurations 
have been checked by the Checkpoint Tech Support and the Checkpoint SMEs 
from our team. This is not a mis-configuration issue and SYNdefender is 
disabled.

Regards,
Sanjay Naik, CISSP
Sr. Security Consultant

----Original Message Follows----
From: David Henning <dhenning@....com>
To: "Pawel Worach" <pawel.worach@...il.com>
CC: bugtraq@...urityfocus.com, sanjaynaik@...e.org
Subject: Re: Checkpoint SYN DoS Vulnerability
Date: Tue, 16 May 2006 17:00:03 -0400

Souds to me like the firewall is configured to confuse scanners on
purpose.  If the performance really does degrad to DoS levels then this is
more likely a mis-configuration of one of their add-ons, not an actual
bug.  Have the settings for their IPS and SYN-Defender been checked
carefully?

David Henning, CISSP
Principal Security Analyst
Hughes Network Systems
x5533

_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today - it's FREE! 
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/