Security Vulnerability in IPFilter 3.3.15 and 3.4.3

Obfuscation Research Laboratories Security Advisory ORL-2000-05-19-01 IPFILTER FIREWALLS SYNOPSIS A weakness exists in the IPFilter firewalling package in all versions up to and including 3.3.15 and 3.4.3 that allows an attacker to penetrate the firewall when a common, yet admittedly flawed,...

Gauntlet Firewall Vulnerability

In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...

Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow

Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67

Zone Labs ZoneAlarm 2.1 Personal Firewall - Port 67 source: https://www.securityfocus.com/bid/1137/info Certain versions of Zone Labs personal Firewall have a vulnerability which allows malicious users to port scan the firewall without being detected. In particular if the port scan originates fro...

CVE-2000-0613

Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...

Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client

Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client // source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind...

Check Point Software Firewall-1 3.0/1 4.0 / Cisco PIX Firewall 4.x/5.x - 'ALG' Client

// source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind firewalls. Whereas previous descriptions of attacks of this style were server based...

fw1-pasv.txt

Multiple firewalls: FTP Application Level Gateway "PASV" Vulnerability Synopsis -------- It is possible to cause certain firewalls to open up any TCP port of your choice against FTP servers that are "protected" by those firewalls. This is done by fooling the FTP server into echoing "227 PASV"...

CVE-1999-0529

A router or firewall forwards packets that claim to come from IANA reserved or private addresses, e.g. 10.x.x.x, 127.x.x.x, 217.x.x.x, etc...

CVE-1999-0528

A router or firewall forwards external packets that claim to come from inside the network that the router/firewall is in front of...

ipchains_patch.txt

Subject: Linux 2.2.10 ipchains Advisory To: [email protected] Linux ipchains Firewall Vulnerability data protect GmbH - Advisory 2 July 27, 1999 Authors: Thomas Lopatic John McDonald Overview -------- data protect has discovered a potential vulnerability in the Linux ipchains firewall...

IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation

IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation soure: https://www.securityfocus.com/bid/287/info IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called...