1724 matches found
Check Point VPN-1/FireWall-1 4.1 on Nokia IPXXX firewall appliance retransmits original packets
Overview A vulnerability in Check Point VPN-1/FireWall-1 running on Nokia IPXXX Appliances can allow an attacker to pass traffic allowed by the security policy through the firewall while retaining the external untranslated destination IP address. Description Nokia IPXXX Appliances are security...
CVE-2001-1018
Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...
Weak TCP Sequence Numbers in Sonicwall SOHO Firewall
This may not seem bad, but to me it seems that this defeats the point of NAT if somebody can steal your sessions. Note the section on TCP sequence prediction. This was a Sonicwall SOHO firewall. ======= Host 192.168.1.254 appears to be up ... good. Initiating SYN half-open stealth scan against...
ALCATEL Speed Touch PRO port redirect exploit
Taking advantage from the ALCATEL Speed Touch Pro backdoor and configuration problems, it is possible to obtain a "full priv" access to the router and launch several attack against the internal LAN thanks to the NAT/PAT feature often made available. If the router is "telnetable" it means that "ip...
CVE-2000-1167: Undefined Security Weakness
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat denyincoming" command, which allows remote attackers to connect to the target system...
Дырка в ppp в FreeBSD (nat deny_incoming)
команда nat denyincoming не работает с нестандартными типами протоколов например IPSec...
FreeBSD-SA-00:70.ppp-nat
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:70 Security Advisory FreeBSD, Inc. Topic: ppp "denyincoming" does not correctly deny incoming packets Category: core Module: ppp Announced: 2000-11-14 Credits: Robin...
TalentSoft Web+ Client/Monitor/server 4.6 - Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to retrieve the internal IP address in ...
Удаленный root через Gauntlet
Классическое переполнение буфера позволяет выполнение кода на сервере. Кроме того, в некоторых случаях некорректно работает NAT...
NAI Gauntlet mishandling of NAT
In some circumstances NAI Gauntlet firewall performs Network Address Translation in an unexpected manner, causing incorrect routable IP addresses to be generated. This can enable unprivileged users on the protected network to knowingly or unknowingly generate spurious source IP addresses. Vendor...
Security Problems with Linux 2.2.x IP Masquerading
Security Problems with Linux 2.2.x IP Masquerading Summary: Due to lax checking in the masquerading kernel code, an attacker is able to rewrite a linux masq gateway's UDP masquerading entries so that the remote host and port are whatever they choose. This creates a tunnel between whatever host an...
GameHouse dldisplay - ActiveX control 0 Real Server 5.07.0 Internal IP Address Disclosure
GameHouse dldisplay - ActiveX control 0 Real Server 5.07.0 Internal IP Address Disclosure source: https://www.securityfocus.com/bid/1049/info By default, Real Server includes the IP address of the server in data sent to the client. If the Real Server is installed on a machine in a NAT environment...
GameHouse dldisplay - ActiveX control 0 / Real Server 5.0/7.0 Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1049/info By default, Real Server includes the IP address of the server in data sent to the client. If the Real Server is installed on a machine in a NAT environment, where requests from the outside network are handled by reverse proxy, this will reveal...
CVE-1999-0843
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...
CVE-1999-0843
CVE-1999-0843 describes a denial-of-service in Cisco routers performing NAT. The vulnerability can be triggered by an FTP client issuing a PORT command directed at a Telnet port, causing the device to basicly become unavailable (DoS). Connected sources identify Cisco routers with NAT as affected ...
CVE-1999-0843: Undefined Security Weakness
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...
CVE-1999-0843
Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port...
CVE-1999-0445
Cisco IOS releases running NAT on some 12.0-based versions may leak packets through input access-lists, due to a group of bugs in NAT-ACL interaction. Affected code paths involve NAT processing with input ACL filtering, potentially causing filters to appear to work while packets bypass them. Cisc...