## SOCKs Vulnerability

### Risk Factor: 10

### Machines Affected:

Improperly configured firewalls

### Description:

This is when the SOCKs library of proxy rules allows packets through (checked or unchecked) that should not be allowed through. It is important to note that this is not necessarily a vulnerability with the SOCKs program itself, but it is a problem with misconfiguring the SOCKs proxy. An example of this might be allowing traceroute through, or ftp through from any port on a remote machine without using PASV (see proxy fixes for the Source Porting bug). This can also bypass a lot of the logging that a proxy server can do and bypass any services that should normally be relayed instead of just passed through.

### Consequences:

Certain services can get through your firewall proxy server without going through the correct checks.

### Fix:

Double, triple, and quadruple check your proxy configurations, make sure ALL unneeded services are turned of, and make sure that nothing goes through without the proxy checking it first. Use the Internet Scanner to run a scan for the services on the firewall that are allowed through that should not be.