Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Aug 29th, 2008, 5:35pm
   Mischel Internet Security Forum
   Internet Security
   General (Moderators: Helena, Gavin_Coe, Magnus)
   Oops! Fire wall test.		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: Oops! Fire wall test.  (Read 543 times)
ReGen
Veteran
*****




It's because we know, that we care.

   


Gender: male
 Posts: 685
Oops! Fire wall test.
« on: Mar 29th, 2003, 11:54am »		 Quote Quote  Modify Modify
http://www.hackbusters.net/oops.html
 
Quote:
Known vulnerable systems: All personal firewalls under Win2K and WinXP.  
 
Vendors contacted:
Tiny Software - Status Unknown
Zone Labs - Patch available
Sygate - Work around available
Symantec - Patch available
Look 'n' Stop - Patch available
NAI/McAfee - Status Unknown

 
Another good little leak test to try - Walked straight through my firewall. (NIS 2003)
« Last Edit: Mar 29th, 2003, 9:04pm by ReGen » IP Logged
--
ReGen
Joel
Newbie
*






   


Gender: male
 Posts: 34
Re: Oops! Fire wall test.
« Reply #1 on: Mar 29th, 2003, 7:09pm »		 Quote Quote  Modify Modify
Went right throught my Sygate....   Sad
IP Logged
acheton
Original Gangster
******





   


Gender: male
 Posts: 1162
Re: Oops! Fire wall test.
« Reply #2 on: Mar 29th, 2003, 7:57pm »		 Quote Quote  Modify Modify
Also goes straight through Outpost Pro (latest beta of version 2).
IP Logged
"What success a man builds from his gifting can be destoyed in a moment because of his character."
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2038
Re: Oops! Fire wall test.
« Reply #3 on: Mar 31st, 2003, 9:25pm »		 Quote Quote  Modify Modify
I believe this is not an accurate test, but it did not send in my WinME version even though it said that it did.  So I am wondering if the proof of concept is, what it says it is.   I used a packet capture sniffer and nothing got out even though it said it did.  I would have to do more research before panicing.
« Last Edit: Mar 31st, 2003, 9:27pm by Jamming » IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
ReGen
Veteran
*****




It's because we know, that we care.

   


Gender: male
 Posts: 685
Re: Oops! Fire wall test.
« Reply #4 on: Apr 1st, 2003, 12:35am »		 Quote Quote  Modify Modify
Using PE to monitor SVCHost.exe the following slips through (The keyed data was "CBA" represented below by 63-62-61)
 
636261.labrea.org......labrea.org..........4.ns.premmagnetics.com..tlist on
 
The site it's transmitted to, doesn’t always seem to pick it up.
« Last Edit: Apr 1st, 2003, 12:45am by ReGen » IP Logged
--
ReGen
Joel
Newbie
*






   


Gender: male
 Posts: 34
Re: Oops! Fire wall test.
« Reply #5 on: Apr 1st, 2003, 1:40am »		 Quote Quote  Modify Modify
I searched the forums at Sygate and found this thread that explains pretty well (in the last post) what this is all about.  Looks to be a "trivial" exploit in the end.
 
http://forums.sygatetech.com/vb/showthread.php?s=&threadid=5038& highlight=oops
 
Joel
IP Logged
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2038
Re: Oops! Fire wall test.
« Reply #6 on: Apr 2nd, 2003, 9:58pm »		 Quote Quote  Modify Modify
Very useful informative thread Joel, thanks! Cool
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register