Firewall-1 Information leak (fwd)

[Tina Bird]

A correction to the earlier posting.

VPN:  http://kubarb.phsx.ukans.edu/~tbird/vpn.html
life: http://kubarb.phsx.ukans.edu/~tbird
work: http://www.counterpane.com

---------- Forwarded message ----------
Date: Wed, 18 Jul 2001 11:01:33 +0200
From: Lars Troen <lars.troen at proxycom.no>
To: Haroon Meer <haroon at sensepost.com>
Cc: bugtraq at securityfocus.com
Subject: RE: Firewall-1 Information leak

Haaron,
The default setting in 4.1SP1 (CP2000) and later is *not* to respond to
unauthenticated topology downloads. You must check the box in Policy
Properties in order to activate it.

Lars
-----Original Message-----
From: Haroon Meer [mailto:haroon at sensepost.com]
Sent: Wednesday, July 18, 2001 03:29
To: bugtraq at securityfocus.com
Subject: Firewall-1 Information leak



VPN is sponsored by SecurityFocus.com