Black Ice Firewall

crackdragon · #1 (**permalink**) Mar 22, 04

So my buddy e-mails me this morning and informs me that blackice seems to have a vulnerability (any version lower then 3.6.ccg, which is the most recent software update). Anyways supposedly the vulnerability allows in a worm which overwrites the first few sectors of the hard drive rendering it useless.
This worm just fucked over my fathers com just a couple days ago. So just thought I would put that out there.
Also if you need a new serial no. just pm me and I can send you one.

rawb · #2 (**permalink**) Mar 22, 04

Ooh yes this was a fun exploit.

Buffer overflow in its checking of the icq protocol (port 4000).

Me and the sr engineer at work first noticed it hitting friday night. A few customers were doing strange traffic. Basicly it can run indescriminate commands on your computer, one of them overwrites the first few sectors of your disk, while another sends out all the traffic your box can handle until it saturates your connection, udp with a source port of 4000.

And this my friends is why software firewalls are stupid.

neoh · #3 (**permalink**) Mar 22, 04

heh.

iptables -t NAT

ppcock · #4 (**permalink**) Mar 22, 04

when i worked at gateway/imag

we didnt support any software firewalls.

they're all pieces of shit.