Description
IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
References
- 20021009 Flood ACK packets cause an IBM SecureWay FireWall DoS mailing-list
- 5924 vdb-entry
- secureway-tcp-flood-dos(10249) vdb-entry