CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6095

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6092

CVE-2007-6092 affects Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 via a buffer overflow in libsrtp. The available descriptions state unknown impact and attack vectors, with uncertainty about privilege boundaries. No remediation or mitigation details are provided in the connected d...

CVE-2007-6098

CVE-2007-6098 affects Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The issue is that the products do not log certain traffic (truncated ICMP, UDP, and TCP packets) and do not log serial-console login attempts with nonexistent usernames. The description notes unknown impact and rem...

Ingate防火墙和SIParator存在多个漏洞

Release notice for Ingate Firewall? 4.6.0 and Ingate SIParator? 4.6.0 Ingate firewall和siparator是企业级的硬件防火墙设备。 Ingate firewall和siparator存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务，缓冲区溢出，和信息泄露攻击。 - 不正确接收部分ICMP报文。 - 截断的ICMP/UDP/TCP会不被记录。 - 使用串口控制台不存在的用户登录不被记录。 - 低特权的管理员密码以明文方式存储。 等。 Ingate SIParator 4.5.2 Ingate...

Design/Logic Flaw

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

CVE-2007-3176

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

Authentication flaw

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3176

The CVE-2007-3176 entry describes a design/logic flaw in Ingate Firewall and SIParator prior to version 4.5.2 that can allow remote authenticated users with only partial privileges to download a Support Report. Content across multiple sources (NVD, CVE lists) confirms the affected product family ...

CVE-2007-3176

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...

InGate Firewall和SIParator存在多个未明漏洞

InGate Firewall/SIParator是具备SIP功能的企业级防火墙。 InGate Firewall/SIParator存在多个未明问题，远程攻击者可以利用漏洞绕过SIP验证需要访问敏感信息。 目前没有详细漏洞细节提供。 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2...

InGate Firewall及SIParator多个远程安全漏洞

Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator防火墙没有正确地限制下载支持报表，这可能允许攻击者下载某些敏感信息；此外这些防火墙的SIP认证要求中存在错误，可能允许攻击者通过maddr参数绕过认证，获得非授权访问。 Ingate Firewall 4.5.2 Ingate SIParator 4.5.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ingate.com/...

Ingate Firewall / SIParator weak authentication

Authentication mechanism is vulnerable to replay attacks...

Authentication flaw

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...

CVE-2007-0334

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...

CVE-2007-0334

CVE-2007-0334 affects InGate Firewall and SIParator SIP module prior to version 4.5.1. The issue is a replay vulnerability in the authentication mechanism, allowing remote attackers to replay credentials or authentication data. No concrete exploit details are provided in the supplied documents. R...