TITLE:
StoneGate Firewall and VPN ISAKMP IKE Message Processing Denial of
Service

SECUNIA ADVISORY ID:
SA17566

VERIFY ADVISORY:
http://secunia.com/advisories/17566/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

SOFTWARE:
Stonesoft StoneGate VPN Client
http://secunia.com/product/1435/
Stonesoft StoneGate High Availability Firewall and VPN 2.x
http://secunia.com/product/1434/

DESCRIPTION:
StoneSoft has acknowledged a vulnerability in StoneGate Firewall and
VPN, which can be exploited by malicious people to cause a DoS
(Denial of Service).

For more information:
SA17553

The vulnerability has been reported in the following versions:
* StoneGate Firewall and VPN engine versions 2.6.0 and prior.
* StoneGate VPN Client versions 2.6.0 and prior.

SOLUTION:
Update to the fixed versions.

StoneGate Firewall and VPN engine:
Update to version 2.6.1 or later.
https://my.stonesoft.com/download/fw

StoneGate VPN Client:
Update to version 2.6.1 or later.
https://my.stonesoft.com/download/vpn

Note: StoneGate Firewall and VPN users not using StoneGate Appliances
or Intel compatible StoneGate platforms can contact Stonesoft
Technical Support for further information.

ORIGINAL ADVISORY:
http://www.stonesoft.com/support/Security_Advisories/7244.html

OTHER REFERENCES:
SA17553:
http://secunia.com/advisories/17553/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------