CVE-2008-1618

CVE-2008-1618 : Watchguard Firebox PPTP VPN (pre-10) may leak valid usernames during MS-CHAPv2 authentication due to distinct error codes for valid vs invalid usernames. The documented behavior enables an attacker to enumerate valid usernames, facilitating targeted password guessing and potential...

Anti-Scanner Defenses (HTTP)

It seems that the remote web server rejects HTTP requests from the Scanner. It is probably protected by a reverse proxy, WAF or IDS/IPS. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved detection code since 2018 Greenbone AG Some text descriptions might be excerpte...

CVE-2002-1979

The CVE-2002-1979 issue affects WatchGuard SOHO firmware 5.1.6 and earlier, and Vclass/RSSA 3.2 SP1 and earlier. The vulnerability arises from sending a PASV command string as the argument to another command to an FTP server, causing a response that contains the PASV string. IPFilter then treats ...

CVE-2002-1979

WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causi...

CVE-2002-1520

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges...

CVE-2000-0894

WatchGuard SOHO Firewall HTTP service exposed to the private network allows administrative actions (password reset, reboot) without proper authentication, enabling denial of service or unauthorized activity. The ISS advisory details multiple issues mapped to CAN-2000-0894/0895/0896 across firmwar...

CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...

CVE-2000-0895

CVE-2000-0895 targets WatchGuard SOHO Firewall’s HTTP server. The ISS advisory describes a GET Request Buffer Overflow vulnerability that can crash the configuration server and, per the entry, may allow arbitrary code execution, with impact including denial of service and potential compromise of ...

CVE-2002-1519

The CVE-2002-1519 entry describes a format-string vulnerability in the CLI interface of WatchGuard Firebox Vclass (3.2 and earlier) and RSSA Appliance 3.0.2. The issue arises from format string specifiers in the password parameter, allowing remote attackers to trigger denial of service and potent...

CVE-2000-0894

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...

CVE-2000-0895

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request...

CVE-2002-1520

The CVE concerns the CLI interface of WatchGuard Firebox Vclass (versions 3.2 and earlier) and RSSA Appliance 3.0.2. The underlying issue is that the SSH connection is not properly closed when the -N option is used during authentication, which can allow remote attackers to access the CLI with adm...

CVE-2003-0641

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess function, as demonstrated using 1 a DLL injection attack, 2 ZwSetSystemInformation, and 3 API hooking in OpenProcess...

CVE-2003-0642

WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory...

CVE-2003-0641

WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess function, as demonstrated using 1 a DLL injection attack, 2 ZwSetSystemInformation, and 3 API hooking in OpenProcess...

CVE-2003-0641

CVE-2003-0641 concerns WatchGuard ServerLock for Windows 2000 prior to SL 2.0.3. The issue allows local users to load arbitrary modules by abusing OpenProcess, demonstrated through three techniques: (1) DLL injection, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess. The affected co...

CVE-2003-0642

CVE-2003-0642 concerns WatchGuard ServerLock for Windows 2000 before SL 2.0.4. The vulnerability is that local users can access kernel memory via a symlink attack on \Device\PhysicalMemory. The root cause is a symlink-based path manipulation that permits local access to kernel memory, leading to ...

CVE-2003-0642

WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory...

Linux 2.0 remote info leak from too big icmp citation

---------------------------------------------------------------------- Cartel Sйcuritй --- Security Advisory Advisory Number: CARTSA-20030314 Subject: Linux 2.0 remote info leak from too big icmp citation Author: Philippe Biondi [email protected] Discovered: March 14, 2003 Published: June...

CVE-2002-1519

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter...