firewalls and vulnerability to TCP/IP crash.

firewalls and vulnerability to TCP/IP crash.

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
firewalls and vulnerability to TCP/IP crash. unstablemicroso 07-25-2006
Posted by =?Utf-8?B?dW5zdGFibGVtaWNyb3Nv on July 25, 2006, 8:33 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi. I'll keep this brief.

I remember from many years ago, vaguely, something about TCP/IP stack
crashes with regard to firewalls. I haven't given it much thought lately.

Just today I used the Sygate technologies Stealthscan, and it stated that it
was possible to crash my computer (or just penetrate my firewall ??) through
known TCP/IP vulnerabilities. Does that make any sense to anyone ? And what
about UNKNOWN TCP/IP vulnerabilities ?

How vulnerable would I be with a McAfee firewall 7.x (about the latest
version)

Any way to protect me from that ?

Any info would be appreciated. Thank you.

Posted by Steven L Umbach on July 25, 2006, 9:52 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
A good firewall at the perimeter is the best defense and will often keep
malicious activity from ever reaching your network adapter. I believe that
when they say it may crash your computer they are saying just that and it
will not necessarily crash your computer. If you are running Windows 95 it
may very well but if you are running XP SP2 that is current with critical
security updates I would really doubt that it would. Go ahead and try it to
see what happens with and without the McAfee firewall enabled. At worst you
would have to reboot.

Steve


> Hi. I'll keep this brief.
>
> I remember from many years ago, vaguely, something about TCP/IP stack
> crashes with regard to firewalls. I haven't given it much thought lately.
>
> Just today I used the Sygate technologies Stealthscan, and it stated that
> it
> was possible to crash my computer (or just penetrate my firewall ??)
> through
> known TCP/IP vulnerabilities. Does that make any sense to anyone ? And
> what
> about UNKNOWN TCP/IP vulnerabilities ?
>
> How vulnerable would I be with a McAfee firewall 7.x (about the latest
> version)
>
> Any way to protect me from that ?
>
> Any info would be appreciated. Thank you.



Posted by karl levinson, mvp on July 26, 2006, 8:55 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Hi. I'll keep this brief.
>
> I remember from many years ago, vaguely, something about TCP/IP stack
> crashes with regard to firewalls. I haven't given it much thought lately.
>
> Just today I used the Sygate technologies Stealthscan, and it stated that
> it
> was possible to crash my computer (or just penetrate my firewall ??)
> through
> known TCP/IP vulnerabilities. Does that make any sense to anyone ? And
> what
> about UNKNOWN TCP/IP vulnerabilities ?

Unless they give you, and us, more information on what was meant, I would
disregard it as scare tactics to increase sales. Sygate is now owned by
Symantec, I believe. I'm not aware of any unpatched TCP/IP-related vulns
today that can crash your system, with or without a firewall. My system
certainly doesn't crash like this.

Computer security is about lessening and managing risks. No security
countermeasure is 100% foolproof or reduces your risk to nothing, including
firewalls, but you're usually at less risk with them than without them.



Posted by Juergen Nieveler on July 26, 2006, 10:39 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Computer security is about lessening and managing risks. No security
> countermeasure is 100% foolproof or reduces your risk to nothing,
> including firewalls, but you're usually at less risk with them than
> without them.

Unless of course the firewall itself has an exploitable bug... ;-)

The best course of action still is not to have any remotely accessible
processes running unless you actually WANT them to be accessible. Maybe
Windows Vista will finally remove all those unnecessary services by
default...

Juergen Nieveler
--
I give up, what is the meaning of life?

Similar ThreadsPosted
What could delete tcpip.sys and srv.sys from my Win2003 ?! July 3, 2005, 10:23 am
Computer(s) keep trying to crash on me. July 6, 2006, 5:41 pm
System Crash and Data Recovery August 14, 2007, 9:53 pm
"Access Denied" on previous My Documents folder after HD crash. July 13, 2005, 5:10 pm
Firewalls July 27, 2005, 9:21 am
what are firewalls? March 23, 2006, 8:30 pm
Firewalls March 29, 2006, 8:10 pm
Firewalls May 31, 2006, 10:42 am
firewalls November 15, 2006, 1:16 am
what are firewalls for? December 28, 2006, 5:26 pm

The site map in XML format XML site map

Contact Us | Privacy Policy