CVE-1999-0157

Cisco PIX firewall/CBAC is affected by CVE-1999-0157 due to an IP fragmentation handling issue that can lead to a denial of service. The available connected documents identify the affected product (Cisco PIX firewall with CBAC) and the impact (DoS), but do not provide explicit root-cause details,...

retina.vs.iis4-round2-the.exploit.txt

http://www.eeye.com/database/advisories/ad06081999/ad06081999-exploit.html Retina vs. IIS4, Round 2 - The Exploit We contemplated releasing this exploit and decided to do it. Here Is Why. We are a full disclosure security team, and we were not working under any non disclosure agreements with...

Cisco PIX and CBAC Fragmentation Attack

...

Cisco PIX Firewall Manager File Exposure

...

CVE-1999-0158

Cisco PIX firewall manager PFM on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known...

CVE-1999-0157

Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service...

PIX Firewall "established" Command

...

CVE-1999-1582

By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not...