Re: Firewall-1 Session Agent, DOS and password thief

[Dug Song <dugsong () MONKEY ORG>]

On Fri, 4 Aug 2000, gregory duchemin wrote:

> 220 FW-1 fake session authentication
> 331 User:
> 331 *FireWall-1 p4ssw0rd pleazzz:
> 200 User has now a clone, c3rb3r
> 230 OK

this was originally reported to BUGTRAQ two years ago, with an exploit.

        http://msgs.securepoint.com/cgi-bin/get/bugtraq/687/1.html

-d.

---
http://www.monkey.org/~dugsong/