| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] fwssd core dumps when probed with nmap 3.45
- To: [email protected]
- Subject: Re: [FW-1] fwssd core dumps when probed with nmap 3.45
- From: Ayden Nash <[email protected]>
- Date: Thu, 18 Sep 2003 15:24:46 +1000
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcN9nY57YOc3qEg+QoWeLk8kS4RvpAAB3eIA
- Thread-topic: [FW-1] fwssd core dumps when probed with nmap 3.45
Nmap has many features and the service could be crashing for several
reasons. What was the exact command line arguments used? You may also
want to capture the outgoing traffic from the machine you are scanning
from for further analysis, you can then attempt to replicate the
malicious payload.
If you have a good debugger you may also attach to the fwssd process and
determine where the bug lies (i.e. null pointer reference or user
controlled memory accesses causing the segmentation violation).
Regards,
Ayden
I'm new to the list and am not sure if this problem has already been
discussed.
In our lab we've installed Checkpoint NG on a Solaris 9 box.
When we run nmap 3.45 against the firewall with the application prob
enabled, fwssd core dumps
>From the coredump the problem appears to be a segmentation fault.
core file = core.fwssd.735.cptest.0.-- program ``
/opt/CPfw1-54/bin/fwssd'' on platform SUNW,UltraSPARC-IIi-cEngine
SIGSEGV: Segmentation Fault
This is a slight concern as there are obvious dos issues here. Is there
a
known bug with fwssd?
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
