Bug#340439: firestarter: denial of service

[Rossen Naydenov]

Subject: firestarter: denial of service
Package: firestarter
Version: 1.0.3-1.1
Severity: grave
Justification: causes non-serious data loss

*** Please type your report below this line ***
when reconfiguring the firewall (from menu -> run wizard) and finally pressing
save button, the gui interface is becomming unresponsive. Although the iptable
rules are already saved the interface stays unresponsive.
The same thing happens if I use nmap to scan the network - the gui becomes
unresponsive. After a while though the gui becomes responsive and I can see
the events, but not in real time.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)

Versions of packages firestarter depends on:
ii  gksu                     1.3.6-1         graphical frontend to su
ii  iptables                 1.3.3-2         Linux kernel 2.4+ iptables adminis
ii  libart-2.0-2             2.3.17-1        Library of functions for 2D graphi
ii  libatk1.0-0              1.10.3-1        The ATK accessibility toolkit
ii  libaudiofile0            0.2.6-6         Open-source version of SGI's audio
ii  libbonobo2-0             2.10.1-1        Bonobo CORBA interfaces library
ii  libbonoboui2-0           2.10.1-1        The Bonobo UI library
ii  libc6                    2.3.5-8         GNU C Library: Shared libraries an
ii  libesd0                  0.2.36-1        Enlightened Sound Daemon - Shared
ii  libgconf2-4              2.10.1-6        GNOME configuration database syste
ii  libgcrypt11              1.2.2-1         LGPL Crypto library - runtime libr
ii  libglade2-0              1:2.5.1-2       library to load .glade files at ru
ii  libglib2.0-0             2.8.4-2         The GLib library of C routines
ii  libgnome-keyring0        0.4.5-1         GNOME keyring services library
ii  libgnome2-0              2.10.1-1        The GNOME 2 library - runtime file
ii  libgnomecanvas2-0        2.10.2-2        A powerful object-oriented display
ii  libgnomeui-0             2.10.1-1        The GNOME 2 libraries (User Interf
ii  libgnomevfs2-0           2.10.1-5        The GNOME virtual file-system libr
ii  libgnutls11              1.0.16-14       GNU TLS library - runtime library
ii  libgpg-error0            1.1-4           library for common error values an
ii  libgtk2.0-0              2.6.10-2        The GTK+ graphical user interface
ii  libice6                  6.8.2.dfsg.1-10 Inter-Client Exchange library
ii  libjpeg62                6b-10           The Independent JPEG Group's JPEG
ii  liborbit2                1:2.12.4-1      libraries for ORBit2 - a CORBA ORB
ii  libpango1.0-0            1.8.2-3         Layout and rendering of internatio
ii  libpopt0                 1.7-5           lib for parsing cmdline parameters
ii  libsm6                   6.8.2.dfsg.1-10 X Window System Session Management
ii  libtasn1-2               0.2.17-1        Manage ASN.1 structures (runtime)
ii  libx11-6                 6.8.2.dfsg.1-10 X Window System protocol client li
ii  libxml2                  2.6.22-2        GNOME XML library
ii  xlibs                    6.8.2.dfsg.1-10 X Window System client libraries m
ii  zlib1g                   1:1.2.3-8       compression library - runtime

firestarter recommends no packages.

-- no debconf information


--
Best regards
Rossen Naydenov