125 matches found
CVE-2007-6095
The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...
CVE-2007-6095
The CVE-2007-6095 entry applies to the SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0. When Remote NAT Traversal is used, the system does not correctly perform user registration and message distribution, which may allow remote authenticated users to receive messages inte...
CVE-2007-6093
CVE-2007-6093 affects Ingate Firewall and SIParator prior to 4.6.0; the SRTP implementation can be coerced into a kernel crash (DoS) by an RTCP index that is ‘much more than expected.’ Upgrading to version 4.6.0 or later is the stated mitigation.
CVE-2007-6092
CVE-2007-6092 affects Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 via a buffer overflow in libsrtp. The available descriptions state unknown impact and attack vectors, with uncertainty about privilege boundaries. No remediation or mitigation details are provided in the connected d...
CVE-2007-6092: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...
CVE-2007-6098: Undefined Security Weakness
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated 1 ICMP, 2 UDP, and 3 TCP packets, which has unknown impact and remote attack vectors; and do not log 4 serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical acce...
CVE-2007-6099: Undefined Security Weakness
Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities...
CVE-2007-6097: Undefined Security Weakness
Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...
CVE-2007-6096: Undefined Security Weakness
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...
CVE-2007-6093: Improper Input Validation
The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...
CVE-2007-6096
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 store passwords for “administrators with less privileges” in cleartext, enabling possible reading by an attacker via unspecified vectors. Affected components are the password storage mechanism; root cause indicated as cleartext storage. No e...
CVE-2007-6095: Exposure of Sensitive Information to an Unauthorized Actor
The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...
CVE-2007-6099
Technical details (affected products, versions, root cause, and remediation) are not publicly provided in the connected documents. Monitor for updates from Red Hat, NVD, and vendors for concrete exposure, fixes, and mitigations.
CVE-2007-6094: Improper Input Validation
The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service module crash via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy PFS...
CVE-2007-6098
CVE-2007-6098 affects Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The issue is that the products do not log certain traffic (truncated ICMP, UDP, and TCP packets) and do not log serial-console login attempts with nonexistent usernames. The description notes unknown impact and rem...
Ingate防火墙和SIParator存在多个漏洞
Release notice for Ingate Firewall? 4.6.0 and Ingate SIParator? 4.6.0 Ingate firewall和siparator是企业级的硬件防火墙设备。 Ingate firewall和siparator存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务，缓冲区溢出，和信息泄露攻击。 - 不正确接收部分ICMP报文。 - 截断的ICMP/UDP/TCP会不被记录。 - 使用串口控制台不存在的用户登录不被记录。 - 低特权的管理员密码以明文方式存储。 等。 Ingate SIParator 4.5.2 Ingate...
Authentication flaw
Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...
CVE-2007-3176
Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...