CVE-2000-0613

Summary: CVE-2000-0613 affects Cisco Secure PIX Firewall, where the device does not properly identify forged TCP Reset (RST) packets. This can allow a remote attacker to disrupt legitimate connections established through the firewall, effectively impacting availability. Root cause / Details from ...

Cisco PIX Firewall Mailguard Feature SMTP Content Filter Bypass

The remote SMTP server seems to be protected by a content filtering firewall probably Cisco's PIX. However, an attacker may bypass this content filtering by issuing a DATA command before a MAIL command, that allows him to directly communicate with the real SMTP daemon. C Tenable Network Security,...

Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure

source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By sending a number of requests to enter passive ftp mode PASV during ...

Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure

Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure source: https://www.securityfocus.com/bid/1877/info The Cisco PIX is a popular firewall network device. It is possible to configure the PIX so that it hides the IP address of internal ftp servers from clients connecting to it. By...

ecurity Advisory: Cisco Secure PIX Firewall Mailguard Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall Mailguard Vulnerability Revision 1.0 For public release 2000 Sept 27 08:00 AM US/Pacific UTC+0700 Summary The Cisco Secure PIX firewall feature "mailguard," which limits SMTP commands to a specified minimum set of commands, can be...

Cisco Secure PIX Firewall Mailguard Vulnerability

...

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion

Cisco PIX Firewall 4.x5.x - SMTP Content Filtering Evasion source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be...

Cisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasion

source: https://www.securityfocus.com/bid/1698/info Like other firewalls, the Cisco PIX Firewall implements technology that reads the contents of packets passing through it for application-level filtering. In the case of SMTP, it can be configured so only certain smtp commands can be allowed...

Cisco Secure PIX Firewall TCP Reset Vulnerability

...

Проблема с CISCO PIX

CISCO PIX не проверяет номер последовательности sequence number TCP RST-пакета, что позволяет завершить любое TCP-соединение, зная только адреса IP и номера портов...

Cisco Security Advisory: Cisco Secure PIX Firewall TCP Reset Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Secure PIX Firewall TCP Reset Vulnerability Revision 1.0 For Public Release 2000 July 11 06:00 US/Eastern UTC+0400 ------------------------------------------------------------------------ Summary ======= The Cisco Secure PIX Firewall cannot distinguish...

PIX Firewall 2.73.x4.x5 - Forged TCP RST

PIX Firewall 2.73.x4.x5 - Forged TCP RST // source: https://www.securityfocus.com/bid/1454/info A connection through a Cisco Secure PIX Firewall can be reset by a third party if the source and destination IP addresses and ports of the connection can be determined or inferred. This can be...

PIX Firewall 2.7/3.x/4.x/5 - Forged TCP RST

// source: https://www.securityfocus.com/bid/1454/info A connection through a Cisco Secure PIX Firewall can be reset by a third party if the source and destination IP addresses and ports of the connection can be determined or inferred. This can be accomplished by sending a forged TCP Reset RST...

Various Lame Stuff

Hi all, Just a summary of some vulnerabilities that have been covered in the Forbidden Knowledge e-zine lately, which some people on the list may need to know... Covered in Issue Eight --- Proxy Plus www.proxyplus.cz has various insecure default settings. NiteServer FTPd is vulnerable to several...

CVE-2000-0613

Cisco Secure PIX Firewall does not properly identify forged TCP Reset RST packets, which allows remote attackers to force the firewall to close legitimate connections...

Cisco Secure PIX Firewall FTP Vulnerabilities

...

Check Point Software Firewall-1 3.0/1 4.0 / Cisco PIX Firewall 4.x/5.x - 'ALG' Client

// source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind firewalls. Whereas previous descriptions of attacks of this style were server based...

Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client

Check Point Software Firewall-1 3.01 4.0 Cisco PIX Firewall 4.x5.x - ALG Client // source: https://www.securityfocus.com/bid/1045/info A vulnerability exists in the handling of certain rules on many firewalls, that may allow users outside of the firewall to gain limited access to areas behind...

CVE-1999-1100

Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective key length of the DES key to 48 bits instead of 56 bits, which makes it easier for an attacker to find the proper key via a brute force attack...

CVE-1999-0157

Cisco PIX firewall/CBAC is affected by CVE-1999-0157 due to an IP fragmentation handling issue that can lead to a denial of service. The available connected documents identify the affected product (Cisco PIX firewall with CBAC) and the impact (DoS), but do not provide explicit root-cause details,...