[Full-Disclosure] minor security problem on Mandrake Multiple Network Firewall GUI - TCP 8443

From: Curt Wilson (netw3_security_at_hushmail.com)
Date: 05/09/03

  • Next message: Curt Wilson: "[Full-Disclosure] Kerio firewall possible fragmentation issue" 
    To: Full-Disclosure@lists.netsys.com
Date: Thu,  8 May 2003 22:54:06 -0700

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I'm investigating a minor problem I've found on the Mandrake Multiple
    Network Firewall administration GUI running on TCP 8443. The actual problem
    appears to be related to the web GUI configuration, but I want to verify
    this with other installations. If you are using MNF and are not too paranoid,
     drop me a line to discuss. I've notified Mandrake of the issue and am
    awaiting any response. I consider this a low priority issue since the
    web GUI port should be heavily ACL'ed in the first place, but I still
    feel that security standards for a firewall should not allow the behavior
    I'm seeing. More details forthcoming.

    Curt R. Wilson
    Netw3 Security
    www.netw3.com
    -----BEGIN PGP SIGNATURE-----
    Version: Hush 2.2 (Java)
    Note: This signature can be verified at https://www.hushtools.com/verify

    wmMEARECACMFAj67QZQcHG5ldHczX3NlY3VyaXR5QGh1c2htYWlsLmNvbQAKCRBGd/Yw
    aRH3Kz10AKCkpZiRQ9zLNRfGoITaEOAq9oy7gwCdH5+UkBgXV3ge0D+UEEQb82cp744=
    =6Si6
    -----END PGP SIGNATURE-----

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Curt Wilson: "[Full-Disclosure] Kerio firewall possible fragmentation issue"
    • Quantcast