728 matches found
Cisco Security Advisory: Cisco PIX Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco PIX Multiple Vulnerabilities Revision 1.0 For Public Release 2002 November 20 at 1600 UTC GMT ---------------------------------------------------------------------- Contents Summary Affected Products Details Impact...
Cisco PIX Multiple Vulnerabilities
...
Protection bypass and traffic amplification in Cisco PIX
Firewall accepts connections and replies packets sent to network address...
Cisco PIX SSH/telnet dDOS vulnerability CSCdy51810
Security Advisory 05.11.02: Title : Cisco PIX SSH/telnet DOS vulnerability CSCdy51810 Reporter : Nils Reichen LANexpert SA Affected software : PIX OS 6.2.2 and probably old version Risk : High Date : November 5, 2002 URL: Full description should be posted in few days on http://www.giac.org/GCIA.p...
CVE-2002-0954
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques...
CVE-2002-0954
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques...
CVE-2002-0954
CVE-2002-0954 relates to Cisco PIX Firewall where the encryption algorithms for the enable and passwd commands can be cracked quickly due to a limited number of rounds. The published description indicates that this weakness facilitates brute‑force decryption of stored or transmitted passwords. Th...
CVE-2002-0954: Undefined Security Weakness
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques...
CVE-1999-1100
CVE-1999-1100 affects Cisco PIX Private Link 4.1.6 and earlier. The vulnerability arises because certain configuration-file commands cause the DES key length to effectively shrink from 56 bits to 48 bits, easing brute-force key discovery. This is the root cause and the primary impact described in...
CVE-1999-1100
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack...
CVE-1999-1100: Undefined Security Weakness
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack...
Older Versions of Cisco PIX Firewall Manager permits retrieval of files
Overview A vulnerability in versions of the Cisco PIX Firewall Manager PFM in use circa September 1998 allows intruders to retrieve files from the host running PFM. Description A vulnerability in the Cisco PIx FIrewall manager allows an intruder to retrieve files from the host running PFM. In...
PIX 'established' and 'conduit' command may have unexpected interactions
Overview A somewhat common configuration of Cisco PIX firewalls may permit a window of opportunity in which an intruder can bypass the firewall. This problem was first publicly described in July, 1998. Description Cisco PIX firewalls protecting servers which offer service to the internet-at-large...
Cisco PIX Firewall Manager (PFM) on Windows Arbitrary File Access
It is possible to read arbitrary files on this machine by using relative paths in the URL. This flaw can be used to bypass the management software's password protection and possibly retrieve the enable password for the Cisco PIX. This vulnerability has been assigned Cisco Bug ID: CSCdk39378...
Cisco PIX Firewall Manager stores enable password in plain text
Overview A vulnerability exists in the way the Cisco Pix Firewall Manager stores authentication credentials which could allow local attackers to have read access to the enable password for the Cisco Pix Firewall. Description The PIX Firewall Manager PFM is a software package designed to allow...
CVE-2001-1098
Cisco PIX firewall manager PFM 4.32g logs the enable password in plaintext in the pfm.log file, which could allow local users to obtain the password by reading the file...
Cisco PIX Firewall Authentication Denial of Service Vulnerability
...
Security Advisory: Cisco Secure PIX Firewall SMTP Filtering Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall SMTP Filtering Vulnerability ========================================================================= Version 1.0 For Public Release 2001 September 26 08:00 AM US/Pacific UTC+0800...