On Wed, 8 Apr 1998, Michael Simonyi wrote:
> Does anyone know of or heard of security issues with an Ascend Pipeline 25.
>
> Mike
>
Yes. The pipelines come with simple packet filtering features. They
also sell a firewall package for about $500. I don't know if this
is any good.
There is a known exploit for ascend pipelines. Information on it
is available at www.rootshell.com. Basicly you send the pipeline
a certain UDP packet at port 9 and it locks up. The pipeline site
has a method for adding a packet filter to block it out, but they
have no fix yet. We tested the exploit against a pipeline 75 and it
indeed locked up and had to be power cycled.
Ken Jones
kbo @
inter7 .
com
www.inter7.com
References:
|
|
