WatchGuard Firebox缓冲区错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A security vulnerability exists in a number of WatchGuard products, which stems...

WatchGuard Firebox 缓冲区错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A buffer error vulnerability exists in several WatchGuard products, which stems...

Watchguard WatchGuard Firebox 安全漏洞

Watchguard WatchGuard Firebox is a US-based Watchguard company that provides a comprehensive range of Internet security services, from traditional IPS and GAV to Web site/application control and malicious software prevention. A security vulnerability exists in WatchGuard Firebox that allows a...

WatchGuard Firebox 输入验证错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. An input validation error vulnerability exists in multiple WatchGuard products,...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

PT-2022-17189 · Watchguard · Watchguard Firebox +1

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.7.2 U2 WatchGuard Firebox and XTM appliances versions 12.x prior to 12.1.3 U8 WatchGuard Firebox and XTM appliances versions 12.2.x through 12.5.x prior to 12.5.9 U2 Description: A...

WatchGuard Firebox 缓冲区错误漏洞

Watchguard WatchGuard Fireware is a firewall operating system from WatchGuard Watchguard USA. The system supports intrusion prevention, spam filtering, SSL VPN, and other features. The WatchGuard Firebox suffers from a buffer error vulnerability that stems from a wgagent stack-based buffer overfl...

WatchGuard Firebox 代码问题漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV to website/application control and malicious software prevention. A code issue exists in WatchGuard Firebox where a vulnerability exists because a...

WatchGuard Firebox Appliance Detection (HTTP)

HTTP based detection of WatchGuard Firebox appliances. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[NEWS] Watchguard Firebox PPTP VPN User Enumeration Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Authentication flaw

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames...

CVE-2008-1618

CVE-2008-1618 : Watchguard Firebox PPTP VPN (pre-10) may leak valid usernames during MS-CHAPv2 authentication due to distinct error codes for valid vs invalid usernames. The documented behavior enables an attacker to enumerate valid usernames, facilitating targeted password guessing and potential...

CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...

CVE-2002-1520

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges...

CVE-2002-1519

The CVE-2002-1519 entry describes a format-string vulnerability in the CLI interface of WatchGuard Firebox Vclass (3.2 and earlier) and RSSA Appliance 3.0.2. The issue arises from format string specifiers in the password parameter, allowing remote attackers to trigger denial of service and potent...

Linux 2.0 remote info leak from too big icmp citation

---------------------------------------------------------------------- Cartel Sйcuritй --- Security Advisory Advisory Number: CARTSA-20030314 Subject: Linux 2.0 remote info leak from too big icmp citation Author: Philippe Biondi [email protected] Discovered: March 14, 2003 Published: June...

CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...

CVE-2002-1520

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges...

CVE-2002-1046

The CVE-2002-1046 entry describes a Denial of Service against Watchguard Firebox firmware 5.x.x via the Dynamic VPN Configuration Protocol (DVCP). A remote attacker can crash the device by sending a malformed packet containing tab characters to TCP port 4110. No root cause, affected versions beyo...