Lucene search

[email protected]CVE-2001-1104

HistoryJul 25, 2001 - 4:00 a.m.

CVE-2001-1104

2001-07-2504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sonicwall soho

tcp sequence

session hijack

cve-2001-1104

nvd

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON

SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions.

CPENameOperatorVersion
sonicwall:soho_firmwaresonicwall soho firmwareeq4.0.0
sonicwall:soho_firmwaresonicwall soho firmwareeq5.0.0
sonicwall:soho_firmwaresonicwall soho firmwareeq5.1.5.0

CPE	Name	Operator	Version
sonicwall:soho_firmware	sonicwall soho firmware	eq	4.0.0
sonicwall:soho_firmware	sonicwall soho firmware	eq	5.0.0
sonicwall:soho_firmware	sonicwall soho firmware	eq	5.1.5.0

References

www.securityfocus.com/archive/1/199632

www.securityfocus.com/bid/3098

Social References

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.6%

JSON

Related for CVE-2001-1104

nessus1