Vulnerability in IBM Secureway Firewall

CVE-2002-1203

IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.

EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.

Affected products

Ibm Secureway_firewall — versions 4.2, 4.2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)