SkipNavigation
US-CERT
American Flag
  Vulnerability
Notes
Database

Search Vulnerability Notes

Vulnerability Notes Help Information


 
 View Notes By
  Name

ID Number

CVE Name

Date Public

Date Published

Date Updated

Severity Metric



 Other Documents
  Technical Alerts

Technical Bulletins

Alerts

Security Tips

 

Vulnerability Note VU#101915

The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic.

Overview

ISS RealSecure Network Sensor "informational signatures" fail to properly process certain types of DHCP traffic, thereby causing the sensor to crash.

I. Description

The ISS RealSecure Network Sensor fails to properly process certain types of DHCP traffic. If the sensor processes certain types of DHCP traffic, it will crash. For more information, please see http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?id=advise116.

II. Impact

An attacker can cause the sensor to stop functioning.

III. Solution

Apply a vendor update.

Systems Affected

VendorStatusDate Updated
Internet Security Systems Inc.Vulnerable11-Mar-2003

References


http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?id=advise116
http://www.iss.net/products_services/enterprise_protection/rsnetwork/sensor.php
http://www.securityfocus.com/bid/4649

Credit

This vulnerability was discovered by ISS X-Force.

This document was written by Ian A. Finlay.

Other Information

Date Public04/30/2002
Date First Published03/11/2003 12:15:39 PM
Date Last Updated03/14/2003
CERT Advisory 
CVE NameCAN-2002-0601
US-CERT Technical Alerts 
Metric4.72
Document Revision10

If you have feedback, comments, or additional information about this vulnerability, please send us email.
 

 
Page Corner Image
Copyright 2003 Carnegie Mellon University
Disclaimers and copyright information
Get Adobe Reader Get Adobe Reader