Date:	Wed, 16 Sep 1998 14:30:32 -0400
From:	Bay Networks Technical Support <annex-support@BAYNETWORKS.COM>
Subject:      Re: Annex DoS
To:	BUGTRAQ@NETSPACE.ORG

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 25 Jul 1998 20:10:21 -0400, Albert Nubdy wrote:
>
>PROBLEM
>=======
>
>  We have found serveral DoS attacks agaisnt Annex terminal servers
>from xylogics(bay).

...

>FIX
>===
>
>  We notified Bay a month ago. They have not responded yet.
>
>
>Credits:
>wh0is, speed1, lizard.
>
>========================================|
>Albert Nubdy | formatez@eduredes.edu.do |
>FormateZ@undernet                       |
>----------------------------------------|

I'd like to announce that an "X Release" patch is available to address both
the PING attack (CR.81216) and the LAND DoS attack (CR.80603) for all
currently shipping Remote Annex and Versalar Remote Access Concentrator
platforms.  The latest X releases may be downloaded free of charge from:

RA2000, RA4000, RA6100, RA6300, 5391, 5393:

    ftp://ftp-support.baynetworks.com/outgoing/RA/X5.4.22.tar.Z (UNIX)
    ftp://ftp-support.baynetworks.com/outgoing/RA/pX5_4_22.exe (NT)

5399 RAC, 8000 RAC:

    ftp://ftp-support.baynetworks.com/outgoing/RA/X6.0.1.tar.Z (UNIX)
    ftp://ftp-support.baynetworks.com/outgoing/RA/pX6_0_1.exe (NT)

In addition, the next release of the Versalar Remote Access Concentrator
software, versioned R6.1, will also contain the two aforementioned fixes.

-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.5.3

iQA/AwUBNgADxd8koQFtGf19EQJ8kgCfQQqjZDjXMIS7ajB1xyUTf/4+6vQAoLaL
IO2YMVkDqi32Jd7q6CiZeVHp
=gOgS
-----END PGP SIGNATURE-----


 Bay Networks Technical Support  1000 Tech Park, Billerica, MA USA
 Voice: 800 2-LAN-WAN, ERC 170  Email: annex-support@BayNetworks.com
 WWW: http://support.baynetworks.com   PGP Key: 0x6D19FD7D