CVE-2006-2925

Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...

Design/Logic Flaw

Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...

CVE-2006-2924

Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...

CVE-2006-2924

CVE-2006-2924 affects Ingate Firewall (SIP module) and SIParator pre-4.4.1. When TLS/SSL is enabled, remote attackers can cause a crash via a crafted SSL/TLS handshake, leading to denial of service. The connected documents indicate the issue is tied to TLS/SSL handshakes but do not provide explic...

CVE-2006-2925

This CVE (CVE-2006-2925) affects Ingate Firewall and SIParator prior to version 4.4.1, where the web interface is vulnerable to Cross-Site Scripting (XSS). The root cause is an XSS weakness in the administrator-facing web interface that could allow remote attackers to inject arbitrary scripts or ...

CVE-2006-2925

Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...

Multiple Ingate Firewall / SIParator vulnerabilities

Crossite scripting, denial of service...

CVE-2005-4464

Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service kernel deadlock by sending a SYN packet for a TCP stream, which requires an RST packet in response...

CVE-2005-4464

The vulnerability CVE-2005-4464 affects Ingate Firewall (before 4.3.4) and SIParator (before 4.3.4). A remote attacker can cause a denial-of-service (kernel deadlock) by sending a SYN packet for a TCP stream that requires an RST in response. No remediation or mitigation details are provided in th...

CVE-2005-4464

Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service kernel deadlock by sending a SYN packet for a TCP stream, which requires an RST packet in response...

Ingate Firewall / SIParator DoS

Malcrafted TCP packet causes kernel to hang...

Ingate Firewall / Ingate SIParator crossite scripting

Administrative Web interface crossite scripting...

[SA16776] Ingate Firewall and SIParator Unspecified Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0311

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources...

CVE-2003-1112

The Session Initiation Protocol SIP implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

CVE-2005-0311

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, allowing remote authenticated users to retain access. Affected product: Ingate Firewall (versions up to 4.1.3 or earlier). Root cause: PPTP session n...

CVE-2005-0311

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources...

Ingate Firewall disabled user PPTP disconnection problem

Then user is disabled active PPTP sessions are not disconnected...

Ingate Firewall: Removed PPTP tunnels not deactivated

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Product: Ingate Firewall Versions: 4.1.3 and earlier Tracking ID: 1826 Summary ======= Active PPTP tunnels in Ingate Firewall are not deactivated when a PPTP user is disabled. If a user has an active PPTP connection to an Ingate Firewall, and that use...

CVE-2003-1112

The Session Initiation Protocol SIP implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...