Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities

Tiny Personal Firewall 3.0 Denial of Service Vulnerabilities

by Nikola Strahija on August 22nd, 2002 Tiny Personal Firewall 3.0 is ideal for standalone computers or for trusted experienced users in corporate environment. It protects personal computers against network attacks, worms, trojans and viruses and manages the access of computer processes (programs) to computer resources (memory, files, devices). This was said on their web-site as it goes.


Tiny Personal Firewall 3.0 for windows platform contains Denial of Service vulnerabilities in its Personal Firewall Agent module specifically the activity logger tab. These vulnerabilities could allow an attacker to crash the operating system consuming 100% of your CPU resources.

Details

1] DoS vulnerability with Tiny Personal Firewall 3.0 Default Installation

- By simply portscanning the host with Tiny Personal Firewall 3.0 default install by sending multiple SYN, UDP, ICMP and TCP full Connect through all its ports and as the user browses its Personal Firewall Agent module firewall Log tab. The user can cause a crash to its own operating system by just clicking or viewing the Activity tab of the said module.

Note: With WinNT 4.0 with Sp6a workaround is not possible.

2] IP spoofing and DoS vulnerability

- It is quite similar to the first one but this vulnerability comes in with the fully configured Tiny Personal Firewall 3.0 and Setting up the personal firewall to HIGH Security. The Personal firewall is having problem blocking packets with Spoof source address .

Workaround:

1] Simply change the permission for the rules under System Applications on Inbound ICMP(LAN1) to ask user.

2] This vulnerability has no work around. Even if you block all the IP addresses, protocols and ports, the Firewall will fail to handle the attack.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »