Design/Logic Flaw

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

CVE-2007-6095

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

CVE-2007-6098

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6094

The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6093

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6099

Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities...

CVE-2007-6093: Improper Input Validation

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6098: Undefined Security Weakness

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6096: Undefined Security Weakness

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6092

CVE-2007-6092 affects Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 via a buffer overflow in libsrtp. The available descriptions state unknown impact and attack vectors, with uncertainty about privilege boundaries. No remediation or mitigation details are provided in the connected d...

CVE-2007-6099

Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6093

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6098

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...

CVE-2007-6093

CVE-2007-6093 affects Ingate Firewall and SIParator prior to 4.6.0; the SRTP implementation can be coerced into a kernel crash (DoS) by an RTCP index that is ‘much more than expected.’ Upgrading to version 4.6.0 or later is the stated mitigation.

CVE-2007-6098

CVE-2007-6098 affects Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The issue is that the products do not log certain traffic (truncated ICMP, UDP, and TCP packets) and do not log serial-console login attempts with nonexistent usernames. The description notes unknown impact and rem...