Symantec Firewall TCP Options DoS

eEye has discovered a remote DoS against the following Symantec firewall
products:

Symantec Norton Internet Security 2003
Symantec Norton Internet Security 2004
Symantec Norton Internet Security Professional 2003
Symantec Norton Internet Security Professional 2004
Symantec Norton Personal Firewall 2003
Symantec Norton Personal Firewall 2004
Symantec Client Firewall 5.01, 5.1.1
Symantec Client Security 1.0

This is not a remote exploit like witty was, but in order to restore a
system effected by this to a usable state requires physical access to the
machine because it causes the system to freeze. I am expecting that
Symantec will include these in the auto updates, so if you support a large
number of people using this software (as we all will eventually) make sure
they are being updates (as you should anyways). If you start to experience
freezes on any, previously stable, computers running one of these programs,
you may want to make sure you have the latest updates.

John

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Apr 26 16:13:14 2004