Notified:  June 26, 2009 Updated: November 05, 2009

Statement Date:   October 15, 2009

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

On September 08, 2009 when CERT-FI has published the Sockstress advisory (CVE-2008-4609) Check Point has released protections that mitigate both Sockstress and NKiller2 attacks. The following SecureKnowledge articles discuss these advisories: sk42723: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42723 sk42725: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42725

Vendor References

• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42723
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42725

Notified:  June 26, 2009 Updated: November 18, 2009

Status

Affected

Vendor Statement

Cisco has published a Security Advisory dealing with the Outpost24 vulnerabilities

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

• http://www.cisco.com/warp/public/707/cisco-sa-20090908-tcp24.shtml
• http://www.securityfocus.com/archive/1/507953

Notified:  June 26, 2009 Updated: October 14, 2009

Status

Affected

Vendor Statement

This issue is being tracked internally by Product Defect Number PD4-899333484. Workaround: Use the "access-profile" to allow only the trusted IP address, while enabling TCP based applications (like telnet, ssh, http, https) on the switch.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Notified:  June 26, 2009 Updated: July 22, 2011

Status

Affected

Vendor Statement

This vulnerability is being worked on. The fix will be available in FTOS version 8.6.1

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

Notified:  June 26, 2009 Updated: November 23, 2009

Statement Date:   October 16, 2009

Status

Affected

Vendor Statement

Please see MS09-048.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References

• http://www.microsoft.com/technet/security/Bulletin/MS09-048.mspx

Notified:  June 26, 2009 Updated: December 01, 2009

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

http://kbase.redhat.com/faq/docs/DOC-21623

Vendor References

• http://kbase.redhat.com/faq/docs/DOC-21623