|
|
|
View Notes By
|
|
|
|
Other Documents
|
|
|
|
|
Clavister Information for VU#412115
| Date Notified: | 2003-01-10 |
| Date Updated: | |
| Statement Date: | |
| Status Summary: | Not Vulnerable |
Vendor StatementClavister Firewall: Not Vulnerable
All versions of Clavister Firewall explicitly fill frame paddings with zeroes above the driver level to avoid this problem. This prevents the firewall itself from becoming a source of information leaks, and also protects hosts that themselves are sources of information leaks.
This zero padding is done for all datagram types; IP as well as non-IP protocols like ARP.Vendor InformationThe vendor has not provided us with any further information regarding this vulnerability.
AddendumThe CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us
email.
|
 |
