KPMG-2002007: Watchguard SOHO Denial of Service

-------------------------------------------------------------------- -=Watchguard SOHO Denial of Service=- Brought to you by KPMG Denmark BUG-ID: 2002007 Released: 08th apr, 2002 -------------------------------------------------------------------- Problem: ======== Sending TCP traffic with bad IP...

CVE-2001-0692

The vulnerability CVE-2001-0692 affects WatchGuard Firebox SMTP proxy in models 2500 and 4500 running versions 4.5 and 4.6. A remote attacker can bypass firewall filtering by sending a base64 MIME email attachment whose boundary name ends with two dashes, exploiting how the SMTP proxy processes M...

CVE-2001-0204

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets...

CVE-2001-0692

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...

CVE-2001-0692

SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...

CVE-2001-0203

Watchguard Firebox II firewall is affected. The issue lets users with read-only access gain read-write privileges and administrative access by accessing a file that contains hashed passphrases and using those hashes during authentication. The provided documents do not specify concrete exploit ste...

CVE-2001-0203

Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication...

CVE-2001-0592

Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream 10,000 of malformed ICMP or TCP packets...

CVE-2001-0592

Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream 10,000 of malformed ICMP or TCP packets...

CVE-2001-0592

Watchguard Firebox II prior to 4.6 is affected. Remote attacker can induce a kernel denial of service by sending a large stream (>10,000) of malformed ICMP or TCP packets. No exploit details are provided in the connected documents. No remediation details are specified in the available sources.

CVE-2001-0204

Watchguard Firebox II allows remote attackers to cause a denial of service by establishing multiple connections and sending malformed PPTP packets...

CVE-2000-0896

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...

CVE-2000-0896

WatchGuard SOHO Firewall is affected by CVE-2000-0896 via Fragmented IP Packet Attack. A flood of fragmented IP packets exhausts the device’s resources, causing it to stop forwarding packets and drop connections. ISS/X-Force notes remote exploitation could crash the configuration server or deny s...

def-2001-18: Watchguard Firebox II Kernel DoS

====================================================================== Defcom Labs Advisory def-2001-18 Watchguard Firebox II Kernel DoS Authors: Andreas Sandor [email protected] Peter Grьndl [email protected] Release Date: 2001-04-05...

CVE-2001-0203

Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication...

CVE-2001-0049

WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests...

def-2001-07: Watchguard Firebox II PPTP DoS

====================================================================== Defcom Labs Advisory def-2001-07 Watchguard Firebox II PPTP DoS Author: Andreas Sandor [email protected] Release Date: 2001-02-14 ======================================================================...

CVE-2000-0896

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...

CVE-2000-0895

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request...

CVE-2000-0894

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...