TUCoPS :: SCO :: cssa0319.txt

OpenLinux: tcp SYN with FIN packets are not discarded


			SCO Security Advisory

Subject:		OpenLinux: tcp SYN with FIN packets are not discarded
Advisory number: 	CSSA-2003-019.0
Issue date: 		2003 May 5
Cross reference:

1. Problem Description

	Allowing TCP packets with both the SYN and FIN bits set
	significantly improve an attacker's chances of circumventing
	a firewall.

2. Vulnerable Supported Versions

	System				Package

	OpenLinux 3.1.1 Server		prior to tcp_sec-1.0-1.i386.rpm
	OpenLinux 3.1.1 Workstation	prior to tcp_sec-1.0-1.i386.rpm

3. Solution

	The proper solution is to install the latest packages. Many
	customers find it easier to use the Caldera System Updater, called
	cupdate (or kcupdate under the KDE environment), to update these
	packages rather than downloading and installing them by hand.

4. OpenLinux 3.1.1 Server

	4.1 Package Location


	4.2 Packages

	57270040e72d49ac888b9967cc86cac8	tcp_sec-1.0-1.i386.rpm

	4.3 Installation

	- rpm -ivh tcp_sec-1.0-1.i386.rpm
	- reboot the machine

	4.4 Source Package Location


	4.5 Source Packages

	acee43450be1a90b11bfc6049e9b788e	tcp_sec-1.0-1.src.rpm

5. OpenLinux 3.1.1 Workstation

	5.1 Package Location


	5.2 Packages

	24b4643542d6c0fbd6b8dc18462fb99e	tcp_sec-1.0-1.i386.rpm

	5.3 Installation

	- rpm -ivh tcp_sec-1.0-1.i386.rpm
	- reboot the machine

	5.4 Source Package Location


	5.5 Source Packages

	a20384e0690e90a6d0528dd3bb4b9843	tcp_sec-1.0-1.src.rpm

8. References

	Specific references for this advisory:


	SCO security resources:


	This security fix closes SCO incidents sr876423, fz527624,

9. Disclaimer

	SCO is not responsible for the misuse of any of the information
	we provide on this website and/or through our security
	advisories. Our advisories are a service to our customers intended
	to promote secure installation and use of SCO products.

10. Acknowledgements

	Paul Starzetz discovered and researched this vulnerability.


Content-Type: application/pgp-signature
Content-Disposition: inline

Version: GnuPG v1.0.6 (SCO_SV)
Comment: For info see http://www.gnupg.org


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH