First published: Fri Dec 31 2004(Updated: )
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
StoneSoft firewall engine | <=2.2.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0498 has a high severity level due to its potential to cause denial of service attacks.
CVE-2004-0498 affects StoneSoft firewall engine version 2.2.8 and earlier.
To fix CVE-2004-0498, upgrade the StoneSoft firewall engine to a version that is newer than 2.2.8.
CVE-2004-0498 allows attackers to perform denial of service attacks by crashing the firewall through crafted H.323 packets.
The best workaround for CVE-2004-0498 is to block H.323 traffic until you can upgrade to a patched version.