6.3(5.106)

[BeatrixKiddo]

Running show version, I get:

Cisco PIX Firewall Version 6.3(5)

how can I be sure if the full version is 6.3(5.106) or just 6.3(5)? this regarding the vulnerability: CSCsc14915.



CSCsc14915 -- PIX 6.3 Spoofed TCP SYN packets can block legitimate TCP connections
This Bug ID tracks the issue for PIX software version 6.3 and older. This DDTS is resolved and available in PIX software version 6.3(5.106). There are workarounds available to mitigate the issue

http://www.cisco.com/en/US/products/products_security_response09186a0080624a37.html

 

[burtsbees]

What model PIX? I think you may be referring to TCP Intercept, which will not work with the FOS forewall. What problems are you having?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[BeatrixKiddo]

Hello, I need to know if this PIX (515) is vulnerable by DoS because of Spoofed TCP SYN attack. Other guy is the administrator I'm only doing the inquiry.

 

[burtsbees]

EVERYTHING is, but some devices can mitigate this attack by tuning half-open connection timers, etc.

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[ADB100]

I have searched on CCO and this bug is listed, however I can't find where to download it?

Does anyone have the image?

 

[burtsbees]

What, PIX 6.3(5) or the updated version?

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[ADB100]

What, PIX 6.3(5) or the updated version?

6.3(5.106). 6.3(5) is available on CCO but I can't find the 6.3(5.106) .bin file anywhere....

Andy

 

[burtsbees]

Yeah, neither can I...I too have 6.3(5)

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!