Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

bugtraq logo Bugtraq mailing list archives

RFP2K05 - NetProwler "Fragmentation" Issue
From: securityteam () AXENT COM (AXENT Security Team)
Date: Tue, 23 May 2000 12:53:39 -0600

NetProwler 3.0 will crash if the Man-in-the-Middle signature encounters
a packet for which the following expression evaluates to true:
    (IP_HEADER_LENGTH + TCP_HEADER_LENGTH) > IP_TOTAL_LENGTH

This is not a packet fragmentation problem.  It is an issue with
specific malformed packets.

This problem has been fixed in NetProwler 3.5, and the code has been
reviewed for other similar issues.

Solutions:
    1. In NetProwler 3.0, disable the Man-in-the-Middle signature for
       all monitored hosts.
    2. Upgrade to NetProwler 3.5 (to be released in June 2000).

References:
    Advisory RF2K05 by rain forest puppy.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]