CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...

CVE-2002-1046

The CVE-2002-1046 entry describes a Denial of Service against Watchguard Firebox firmware 5.x.x via the Dynamic VPN Configuration Protocol (DVCP). A remote attacker can crash the device by sending a malformed packet containing tab characters to TCP port 4110. No root cause, affected versions beyo...

CVE-2002-1520

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges...

CVE-2002-1046: Undefined Security Weakness

Dynamic VPN Configuration Protocol service DVCP in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service crash via a malformed packet containing tab characters to TCP port 4110...

CVE-2002-1979

WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causi...

CVE-2002-1047

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-1046

Dynamic VPN Configuration Protocol service DVCP in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service crash via a malformed packet containing tab characters to TCP port 4110...

Unauthorized access in WatchGuard

Format string bugs and insufficient username checks allows administrative access...

Watchguard firewall appliances security issues

Scope: WatchGuard Firewall Appliances. Vendor: WatchGuard Technologies, Inc http://www.watchguard.com . Affected: Vclass appliances running the current version of Vclass software. Legacy RSSA appliances running Vclass software. Legacy RSSA appliances that have not yet upgraded to Vclass software...

CVE-2002-1047

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-1047

The CVE-2002-1047 entry concerns the FTP service in Watchguard Soho Firewall 5.0.35a. The vulnerability, as described in multiple sources, allows remote attackers to gain privileges when supplying a correct password but an incorrect user name. The available documents do not specify the exact root...

CVE-2002-1047: Undefined Security Weakness

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0528

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...

KPMG-2002030: Watchguard Firebox Dynamic VPN Configuration Protocol DoS

-------------------------------------------------------------------- Title: Watchguard Firebox Dynamic VPN Configuration Protocol DoS BUG-ID: 2002030 Released: 9th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can crash the Dynami...

Watchguard Firebox DoS

Specially crafted data sent to TCP/4110 causes Dynamic VPN Configuration Protocol service to crash...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0528

CVE-2002-0528 affects Watchguard SOHO firewall 5.0.35. After upgrading to 5.0.35, the device unpredictably disables certain IP restrictions configured for customized services, enabling remote attackers to bypass the intended access control rules. Root cause described as upgrade-related misbehavio...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 is affected by a vulnerability where a remotely sent packet with bad IP options can cause the device to crash and reboot. The issue arises in the IP option handling path of the firewall, leading to a denial of service. No specific exploit details, affected v...

CVE-2002-0528

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...