CVE-2007-0334

CVE-2007-0334 affects InGate Firewall and SIParator SIP module prior to version 4.5.1. The issue is a replay vulnerability in the authentication mechanism, allowing remote attackers to replay credentials or authentication data. No concrete exploit details are provided in the supplied documents. R...

InGate Firewall和SIParator认证中继绕过限制漏洞

BUGTRAQ ID: 22080 Ingate Firewall和SIParator都是企业级的硬件防火墙设备。 Ingate Firewall和SIParator的SIP模块存在访问认证处理错误，允许远程攻击者通过中继攻击绕过某些安全限制，获得非授权访问。 受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 不受影响系统： Ingate Firewall 4.5.1 Ingate SIParator 4.5.1 厂商补丁： Ingate ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SIP over TLS: X.509 peer authentication vulnerability in Ingate products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SIP over TLS: X.509 peer authentication vulnerability in Ingate products ======================================================================== Product: Ingate Firewall and Ingate SIParator Versions: all current versions Tracking ID: 2829 Summary...

CVE-2006-2925

Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...

Design/Logic Flaw

Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...

CVE-2006-2924

Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...

CVE-2006-2925

This CVE (CVE-2006-2925) affects Ingate Firewall and SIParator prior to version 4.4.1, where the web interface is vulnerable to Cross-Site Scripting (XSS). The root cause is an XSS weakness in the administrator-facing web interface that could allow remote attackers to inject arbitrary scripts or ...

CVE-2006-2924

Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service crash via a crafted SSL/TLS handshake...

CVE-2006-2925

Cross-site scripting XSS vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality...

CVE-2006-2924

CVE-2006-2924 affects Ingate Firewall (SIP module) and SIParator pre-4.4.1. When TLS/SSL is enabled, remote attackers can cause a crash via a crafted SSL/TLS handshake, leading to denial of service. The connected documents indicate the issue is tied to TLS/SSL handshakes but do not provide explic...

Multiple Ingate Firewall / SIParator vulnerabilities

Crossite scripting, denial of service...

CVE-2005-4464

Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service kernel deadlock by sending a SYN packet for a TCP stream, which requires an RST packet in response...

CVE-2005-4464

The vulnerability CVE-2005-4464 affects Ingate Firewall (before 4.3.4) and SIParator (before 4.3.4). A remote attacker can cause a denial-of-service (kernel deadlock) by sending a SYN packet for a TCP stream that requires an RST in response. No remediation or mitigation details are provided in th...

CVE-2005-4464

Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service kernel deadlock by sending a SYN packet for a TCP stream, which requires an RST packet in response...

Ingate Firewall / SIParator DoS

Malcrafted TCP packet causes kernel to hang...

[SA18138] Ingate Firewall and SIParator Denial of Service Vulnerability

TITLE: Ingate Firewall and SIParator Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18138 VERIFY ADVISORY: http://secunia.com/advisories/18138/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Ingate SIParator 4.x http://secunia.com/product/5687/ Ingate...

Ingate Firewall / Ingate SIParator crossite scripting

Administrative Web interface crossite scripting...

[SA16776] Ingate Firewall and SIParator Unspecified Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-0311

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, which could allow remote authenticated users to retain unauthorized access to resources...