88 matches found
CVE-2007-3177
Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...
CVE-2007-3177
Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...
InGate Firewall和SIParator存在多个未明漏洞
InGate Firewall/SIParator是具备SIP功能的企业级防火墙。 InGate Firewall/SIParator存在多个未明问题，远程攻击者可以利用漏洞绕过SIP验证需要访问敏感信息。 目前没有详细漏洞细节提供。 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2...
InGate Firewall及SIParator多个远程安全漏洞
Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator防火墙没有正确地限制下载支持报表，这可能允许攻击者下载某些敏感信息；此外这些防火墙的SIP认证要求中存在错误，可能允许攻击者通过maddr参数绕过认证，获得非授权访问。 Ingate Firewall 4.5.2 Ingate SIParator 4.5.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ingate.com/...
Ingate Firewall / SIParator weak authentication
Authentication mechanism is vulnerable to replay attacks...
Authentication flaw
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...
CVE-2007-0334
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...
CVE-2007-0334
CVE-2007-0334 affects InGate Firewall and SIParator SIP module prior to version 4.5.1. The issue is a replay vulnerability in the authentication mechanism, allowing remote attackers to replay credentials or authentication data. No concrete exploit details are provided in the supplied documents. R...
CVE-2007-0334
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...
InGate Firewall和SIParator认证中继绕过限制漏洞
BUGTRAQ ID: 22080 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator的SIP模块存在访问认证处理错误，允许远程攻击者通过中继攻击绕过某些安全限制，获得非授权访问。 受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 不受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 厂商补丁： Ingate ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
SIP over TLS: X.509 peer authentication vulnerability in Ingate products
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SIP over TLS: X.509 peer authentication vulnerability in Ingate products ======================================================================== Product: Ingate Firewall and Ingate SIParator Versions: all current versions Tracking ID: 2829 Summary...
CVE-2006-2924
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...
Cross site scripting
Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...
CVE-2006-2925
Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...
Design/Logic Flaw
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...
CVE-2006-2924
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...
CVE-2006-2924
CVE-2006-2924 affects Ingate Firewall (SIP module) and SIParator pre-4.4.1. When TLS/SSL is enabled, remote attackers can cause a crash via a crafted SSL/TLS handshake, leading to denial of service. The connected documents indicate the issue is tied to TLS/SSL handshakes but do not provide explic...
CVE-2006-2925
This CVE (CVE-2006-2925) affects Ingate Firewall and SIParator prior to version 4.4.1, where the web interface is vulnerable to Cross-Site Scripting (XSS). The root cause is an XSS weakness in the administrator-facing web interface that could allow remote attackers to inject arbitrary scripts or ...
CVE-2006-2925
Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...