Secunia

A vulnerability has been reported in multiple Stonesoft Products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing TCP packets and can be exploited to e.g. render the blacklist service or the SSL VPN Web Console unresponsive.

The vulnerability is reported in the following products:
* StoneGate Firewall and VPN versions up to 4.2.10, and versions between 4.3.0 and 5.0.2
* StoneGate IPS Sensor and Analyzer versions up to 4.2.3, 4.3.6 and 5.0.1
* StoneGate SSL VPN up to version 1.3.1

Solution
The vendor recommends restricting access to the affected interfaces to trusted IP addresses only.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Outpost24.

Original Advisory
http://www.stonesoft.com/en/support/security_advisories/2009_17_09.html

Deep Links
Links available in Customer Area