1.7
CVSSv2

CVE-2006-0956

Published: 02/03/2006 Updated: 08/03/2011
CVSS v2 Base Score: 1.7 | Impact Score: 2.9 | Exploitability Score: 3.1
VMScore: 151
Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

nuauth in NuFW prior to 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server.

Vulnerable Product Search on Vulmon Subscribe to Product

nufw nufw firewall 1.0.20

Vendor Advisories

Debian Bug report logs - #358475 nuauth: potential DoS related to a misuse of GnuTLS Package: nuauth; Maintainer for nuauth is Pierre Chifflier <pollux@debianorg>; Source for nuauth is src:nufw (PTS, buildd, popcon) Reported by: SALVETTI Djoume <djoume@taketorg> Date: Wed, 22 Mar 2006 21:48:02 UTC Severity: normal ...