OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1999: Re: Network Scan Vulnerability [SUMMARY]

Re: Network Scan Vulnerability [SUMMARY]

dpk (dpkEGR.MSU.EDU)
Wed, 13 Jan 1999 20:20:14 -0500 

On Tue, 5 Jan 1999, Tomasz Grabowski wrote:

   [snip of vulnerable systems]

   And  FORE PowerHub, 7-2.6.3.4-P10.
   It hangs for about 80 seconds when scanned with nmap -sS -O (nmap V2.00)

   I posted it to FORE about three weeks ago and never received an answer.

   BTW: it's not the first time when FORE don't care about such
   things. About 4 months ago I posted simillar message to them (i
   described how to make one TCP/IP packet, which will hang PowerHubs)
   and I received only semi-generated message... nothing else.

   I think that the problem with nmap now is something very simillar
   to that one_TCP/IP_packet attack...

I passed this along to the Fore Engineers in my area.  They took it
seriously and replied back that Powerhub Software 5.0.1 (11193) fixes
the problems relating to nmap, as well as cheops/queso scans.

Fyi,
Dennis
--
Dennis Kelly <dpkegr.msu.edu>
Network Adminstrator
College of Engineering, MSU