CERT home
vulnerabilities & fixesevaluations & practicesresearch & analysistraining & education
homesearchFAQsite indexcontact
Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information
 

 View Notes By
Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric

Vulnerability Note VU#101915

The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic.

Overview

ISS RealSecure Network Sensor "informational signatures" fail to properly process certain types of DHCP traffic, thereby causing the sensor to crash.

I. Description

The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic. If the sensor processes certain types of DHCP traffic, it will crash. For more information, please see http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?id=advise116.

II. Impact

An attacker can cause the sensor to stop functioning.

III. Solution

Apply a vendor update.

Systems Affected
VendorStatusDate Updated
Internet Security Systems Inc.Vulnerable11-Mar-2003

References


http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?id=advise116
http://www.iss.net/products_services/enterprise_protection/rsnetwork/sensor.php
http://www.securityfocus.com/bid/4649

Credit

This vulnerability was discovered by ISS X-Force.

This document was written by Ian A. Finlay.

Other Information

Date Public04/30/2002
Date First Published03/11/2003 12:15:39 PM
Date Last Updated03/14/2003
CERT Advisory 
CVE NameCAN-2002-0601
Metric4.72
Document Revision10

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

Copyright 2003 Carnegie Mellon University