CVE-2007-6093

The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors...

CVE-2007-6097

Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."...

CVE-2007-6092

Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries...

CVE-2007-6094

The CVE-2007-6094 entry describes a DoS vulnerability in the IPsec module of Ingate Firewall (and SIParator) prior to version 4.6.0. A remote attacker can crash the module by sending an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS). Affected products: Ingate Firewall before 4.6....

Ingate防火墙和SIParator存在多个漏洞

Release notice for Ingate Firewall? 4.6.0 and Ingate SIParator? 4.6.0 Ingate firewall和siparator是企业级的硬件防火墙设备。 Ingate firewall和siparator存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务，缓冲区溢出，和信息泄露攻击。 - 不正确接收部分ICMP报文。 - 截断的ICMP/UDP/TCP会不被记录。 - 使用串口控制台不存在的用户登录不被记录。 - 低特权的管理员密码以明文方式存储。 等。 Ingate SIParator 4.5.2 Ingate...

Authentication flaw

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3176

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

Design/Logic Flaw

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

CVE-2007-3176

Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to download a Support Report...

CVE-2007-3177

Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...

CVE-2007-3176

The CVE-2007-3176 entry describes a design/logic flaw in Ingate Firewall and SIParator prior to version 4.5.2 that can allow remote authenticated users with only partial privileges to download a Support Report. Content across multiple sources (NVD, CVE lists) confirms the affected product family ...

InGate Firewall和SIParator存在多个未明漏洞

InGate Firewall/SIParator是具备SIP功能的企业级防火墙。 InGate Firewall/SIParator存在多个未明问题，远程攻击者可以利用漏洞绕过SIP验证需要访问敏感信息。 目前没有详细漏洞细节提供。 Ingate SIParator 4.5.1 Ingate SIParator 4.4.1 Ingate SIParator 4.3.4 Ingate SIParator 4.3.3 Ingate SIParator 4.3.2 Ingate SIParator 4.3.1 Ingate SIParator 4.3 Ingate SIParator 4.2...

InGate Firewall及SIParator多个远程安全漏洞

Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator防火墙没有正确地限制下载支持报表，这可能允许攻击者下载某些敏感信息；此外这些防火墙的SIP认证要求中存在错误，可能允许攻击者通过maddr参数绕过认证，获得非授权访问。 Ingate Firewall 4.5.2 Ingate SIParator 4.5.2 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.ingate.com/...

Ingate Firewall / SIParator weak authentication

Authentication mechanism is vulnerable to replay attacks...

CVE-2007-0334

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...

Authentication flaw

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...

CVE-2007-0334

Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors...