42 matches found
CVE-2011-3337
eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/...
eEye Retina audit script could execute untrusted programs as root
Overview eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular audit ID 2499 uses find1 and execute -exec when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an...
CVE-2001-1456
Buffer overflow in the 1 smap/smapd and 2 CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message...
CVE-2001-1456
The CVE-2001-1456 issue concerns Gauntlet Firewall versions 5.0–6.0, where a buffer overflow in the (1) smap/smapd and (2) CSMAP daemons allows remote attackers to execute arbitrary code via a crafted mail message. The root cause is a buffer overflow in the handling of mail content by these daemo...
Denial of Service against Gauntlet-Firewall / SQL-Gateway
DOS-Attack against Gauntlet Firewall ------------------------------------- We found out a security-issue with the Oracle-Proxy SQL-Gateway of Gauntlet Firewall, Version 6 manufactured by Secure Computing/NAI, serversrunning Solaris 8, newest Patches installed. Abstract: --------- Sending subseque...
Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service
Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the...
Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service
source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the service listens on. The service will need to be restarted to regain...
CVE-1999-1047
Gauntlet 5.0 BSDI: When patches are installed in a particular order, the system allows remote attackers to bypass firewall access restrictions and prevents logging of those activities. Affected component: Gauntlet firewall on BSDI with specific patch ordering. Root cause described as the patch se...
Network Associates CSMAP and smap/smapd vulnerable to buffer overflow thereby allowing arbitrary command execution
Overview A remotely exploitable buffer overflow exists in the Gauntlet Firewall. Description The buffer overflow occurs in the smap/smapd and CSMAP daemons. According to PGP Security, these daemons are responsible for handling email transactions for both inbound and outbound e-mail.This...
Переполнение буфера в Gauntlet Firewall (buffer overflow)
Переполнение буфера в smap/smapd...
CVE-2001-1456
Buffer overflow in the 1 smap/smapd and 2 CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message...
Gauntlet Firewall Vulnerability
In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...
NAI Gauntlet mishandling of NAT
In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...
Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow
Gauntlet Firewall 4.14.25.0 Webshield E-ppliance 100.0300.0 IRIX 6.5.x - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2...
Gauntlet Firewall 4.1/4.2/5.0 / Webshield E-ppliance 100.0/300.0 / IRIX 6.5.x - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1234/info A buffer overflow exists in the version of Mattel's Cyber Patrol software integrated in to Network Associates Gauntlet firewall, versions 4.1, 4.2, 5.0 and 5.5. Due to the manner in which Cyber Patrol was integrated, a vulnerability was...
CVE-1999-0683
The CVE-1999-0683 entry corresponds to a Denial of Service against Gauntlet Firewall triggered by a malformed ICMP packet. The available connected documents confirm the affected product (Gauntlet Firewall) and the root cause (malformed ICMP handling leading to DoS); no further exploit details, af...
CVE-1999-0683
Denial of service in Gauntlet Firewall via a malformed ICMP packet...
CVE-1999-1047
When BSDI patches for Gauntlet 5.0 BSDI are installed in a particular order, Gauntlet allows remote attackers to bypass firewall access restrictions, and does not log the activities...
Gauntlet_Firewall_Lockup.txt
Subject: Remotely Lock Up Gauntlet 5.0 To: [email protected] / Discovered and written by: - Reply to Network Associates: "Who's watching your network?" MSG.net "Who's watching the watchers?" This can be found online at http://www.msg.net/firewalls/tis/bland.c Description: If you know an I...