NuFW nuauth远程TLS连接处理拒绝服务漏洞

漏洞介绍

在NuFW 1.0.21之前版本中的nuauth没有妥善处理阻止TLS插口，从而使远程经过验证用户向验证服务器发送洪水式数据包，遇到拒绝服务(服务挂起)。

漏洞补丁

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

NuFW NuFW 1.0.11

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.12

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.13

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.14

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.15

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.16

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.17

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.18

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.19

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

NuFW NuFW 1.0.20

NuFW nufw-1.0.21.tar.bz2

http://www.nufw.org/download/nufw/nufw-1.0.21.tar.bz2

参考网址

来源: www.nufw.org

链接：http://www.nufw.org/+NuFW-1-21-minor-security-fix+.html

来源: VUPEN

名称: ADV-2006-0762

链接：http://www.frsirt.com/english/advisories/2006/0762

来源: SECUNIA

名称: 19046

链接：http://secunia.com/advisories/19046

受影响实体

信息来源

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200603-006