Re: TCP SYN packets which have the FIN flag set.

To: <luisp.m@ono.com>
Cc: <debian-security@lists.debian.org>
Subject: Re: TCP SYN packets which have the FIN flag set.
From: "Jean HARY" <jean.hary@atosorigin.com>
Date: Tue, 8 Mar 2005 12:05:42 +0100 (Paris, Madrid)
Message-id: <[🔎] 422D8706.000024.00712@FRAOI02252>

TCP SYN
The device does not seem to discard TCP SYN packets which have the FIN flag
set. This security flaw may allow an attacker to bypass firewall rules.
Risk Implication 
This device should be configured to discard TCP SYN packets which have the
FIN flag set.
 
Recommendation
This device should be configured to discard TCP SYN packets which have the
FIN flag set
 
 

Comment configurer le device to discard TCP SYN sur HP-UX ???

Merci de votre aide

Reply to:

Prev by Date: Re: iptables connlimit
Next by Date: Re: iptables connlimit
Previous by thread: A security fix introduced a 'grave' bug
Next by thread: Analysis vulnerabilities associated to published security advisories, anyone?
Index(es):
- Date
- Thread