Lucene search

PRIOn knowledge basePRION:CVE-2007-0188

HistoryJan 12, 2007 - 5:04 a.m.

Design/Logic Flaw

2007-01-1205:04:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.2%

JSON

F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation of an IP address (“dotless IP address”), which allows remote authenticated users to connect to the FirePass administrator console and certain other network resources.

CPENameOperatorVersion
firepasseq5.4.7
firepasseq5.4.8
firepasseq5.4.2
firepasseq5.4.9
firepasseq6.0
firepasseq5.5
firepasseq5.5.2
firepasseq5.4.4
firepasseq5.4
firepasseq5.4.1

Name	Operator	Version
firepass	eq	5.4.7
firepass	eq	5.4.8
firepass	eq	5.4.2
firepass	eq	5.4.9
firepass	eq	6.0
firepass	eq	5.5
firepass	eq	5.5.2
firepass	eq	5.4.4
firepass	eq	5.4
firepass	eq	5.4.1

Rows per page:

1-10 of 141

References

lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html

secunia.com/advisories/23640

www.mnin.org/advisories/2007_firepass.pdf

www.osvdb.org/32734

www.securityfocus.com/bid/21957

tech.f5.com/home/solutions/sol6922.html

6.8 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.2%

JSON

Related for PRION:CVE-2007-0188