729 matches found
Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure
Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By...
ecurity Advisory: Cisco Secure PIX Firewall Mailguard Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall Mailguard Vulnerability Revision 1.0 For public release 2000 Sept 27 08:00 AM US/Pacific UTC+0700 Summary The Cisco Secure PIX firewall feature "mailguard," which limits SMTP commands to a specified minimum set of commands, can be...
Cisco Secure PIX Firewall Mailguard Vulnerability
...
Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion
Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...
Cisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasion
source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be configured so only certain smtp commands can be allowed...
Cisco Secure PIX Firewall TCP Reset Vulnerability
...
Проблема с CISCO PIX
CISCO PIX не проверяет номер последовательности sequence number TCP RST-пакета, что позволяет завершить любое TCP-соединение, зная только адреса IP и номера портов...
Cisco Security Advisory: Cisco Secure PIX Firewall TCP Reset Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall TCP Reset Vulnerability Revision 1.0 For Public Release 2000 July 11 06:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary ======= The Cisco Secure PIX Firewall cannot distinguish...
PIX Firewall 2.73.x4.x5 - Forged TCP RST
PIX Firewall 2.73.x4.x5 - Forged TCP RST // source: https://www.securityfocus.com/bid/1454/info A connection through a Cisco Secure PIX Firewall can be reset by a third party if the source and destination IP addresses and ports of the connection can be determined or inferred. This can be...
PIX Firewall 2.7/3.x/4.x/5 - Forged TCP RST
// source: https://www.securityfocus.com/bid/1454/info A connection through a Cisco Secure PIX Firewall can be reset by a third party if the source and destination IP addresses and ports of the connection can be determined or inferred. This can be accomplished by sending a forged TCP Reset RST...
Various Lame Stuff
Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...
CVE-2000-0613
Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...
Cisco Secure PIX Firewall FTP Vulnerabilities
...
Check Point Software Firewall-1 3.0/1 4.0 / Cisco PIX Firewall 4.x/5.x - 'ALG' Client
// source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind firewalls. Whereas previous descriptions of attacks of this style were server based...
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client
Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client // source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind...
CVE-1999-1100
Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack...
CVE-1999-0158
Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...
CVE-1999-0157
Cisco PIX firewall/CBAC is affected by CVE-1999-0157 due to an IP fragmentation handling issue that can lead to a denial of service. The available connected documents identify the affected product (Cisco PIX firewall with CBAC) and the impact (DoS), but do not provide explicit root-cause details,...
CVE-1999-0158
The CVE-1999-0158 issue affects Cisco PIX Firewall Manager (PFM) running on Windows NT. An HTTP server in PFM listens on port 8080; if reachable from inside the network and the attacker knows absolute file paths, they can read arbitrary files on the PFM host (and potentially on connected network ...