910 matches found
Multiple vendors' firewalls do not adequately keep state of FTP traffic
Overview Firewalls and other systems that inspect FTP application layer traffic may not adequately maintain the state of FTP commands and responses. As a result, an attacker could establish arbitrary TCP connections to FTP servers or clients located behind a vulnerable firewall. Description Many...
ISS Security Alert: Multiple Vulnerabilities in Universal Plug and Play Service
Internet Security Systems Security Alert December 20, 2001 Multiple Vulnerabilities in Universal Plug and Play Service Synopsis: ISS X-Force is aware of multiple vulnerabilities with the Universal Plug and Play Service UPnP included with several Microsoft Windows operating systems. UPnP is a...
CVE-2001-0376
CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...
CVE-2001-0376
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...
CVE-2000-1032
CVE-2000-1032 affects Check Point Firewall-1 4.0 and earlier. The client authentication interface returns distinct error messages for invalid usernames versus invalid passwords, enabling remote attackers to enumerate valid usernames on the firewall. The existing records do not provide concrete de...
Дырка в фаерволах Nokia
Переполнение буфера в утилите удаленного администрирования...
connect.asm
; Passive Connection Shellcode ; ; Coded by Scrippie - [email protected] - http://b0f.freebsd.lublin.pl ; ; Why? This evades firewalls... ; This is the well documented testing part of the shellcode ; The code isn't relocatable, isn't optimized and contains NULL chars ; ; YES, this is for NASM, I...
CVE-1999-0240
Some filters or firewalls allow fragmented SYN packets with IP reserved bits in violation of their implemented policy...
PT-1998-1094 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns accounts on network devices such as routers, firewalls, or other similar equipment that have default, null, blank, or missing passwords. This poses a significant...
