[Deep Fury]

Noh, osadel tulemüüritegijatel ikka jätkubseda va "andekust" ;(

Issue : Full access to open udp ports with Sygate Pro 5.0

Vendor status : vendor was contacted but got no response
from them

Description:

Sygate Pro is a personal firewall very easy to configure.No rules
are installed in a default configuration.A default installation pretends
to be enough to block all accesses to your ports.

By default , traffic from udp source port 137 or 138 is allowed by
the firewall , so to bypass it you just have to set your source port
to 137 or 138.Doing this all packets addressed to an open udp port
will be forwarded by the firewall

Attack :

nmap -vv -P0 -sU 192.168.0.1 -g 137

Recommendation :

Set a rule to block all incoming udp traffic with source
port 137 and 138

Regards,

David Fernandez Madrid,
Madrid,Spain

[Robot]

http://www.agnitum.com/php_scripts/compare.php