Security Reviews Exploits Tools UNIX focus Windows NT focus 1. Outlook Express Address Book Spoofing 2. Can Execute Scripts 3. Shambala FTP server Directory Traversal 4. Summary The Wingate engine can be disabled remotely by sending an abnormal string to the Winsock Redirector Service.
Prior versions are possibly vulnerable as well.
If the Winsock redirector service is enabled, it is possible to crash the Wingate service remotely by sending a special string to the Winsock redirector. The Wingate engine has to be restarted to resume normal operation. Tested on the evaluation version of Wingate Pro 4.0.1. I accept no responsibility for damage incurred by the use of it. Causes all Wingate services to become unavailable until the Wingate Engine is restarted.