CVE-2002-0514

OpenBSD 3.0 PF with the return-rst rule is vulnerable. The RST packet’s TTL is set to 128, allowing remote attackers to infer whether a port is filtered by comparing TTL to the default. Affected component: PF rule handling in OpenBSD 3.0. Root cause: TTL manipulation in RST responses leads to dis...

PT-2002-1565 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD version 3.0 Description: The issue allows remote attackers to determine if a port is being filtered due to the TTL being different from the default TTL in the RST packet. This occurs because the PF in OpenBSD 3.0 with the return-rst...

CVE-1999-1204

CVE-1999-1204 affects Check Point Firewall-1. It stems from improper handling of certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which can produce a rule defaulting to an ANY address and grant access to more systems than intended. CVSSv2 score 7.5 (HIGH) with Network...

Security Advisory FreeBSD-SA-01:53.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...

CVE-2001-0483

CVE-2001-0483 affects Axent Raptor Firewall 6.5. A configuration error allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy rule is not set. CVSS2 base score 7.5 (NETWORK, LOW auth, PARTIAL confidentiality/integrity/availability). Exploit d...

CVE-2001-0483: Undefined Security Weakness

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set...

IPFilter 3.x - Fragment Rule Bypass

source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts behind an IPFilter firewall. The...

A fragmentation attack against IP Filter

I did not want to release this on a Friday afternoon. Happy experimenting -Thomas ---- cut here ---- A fragmentation attack against IP Filter April 6th, 2001 Thomas Lopatic [email protected] The research for this advisory was supported by TUV data protect GmbH, a TUV Rheinland/Berlin-Brandenburg...

X4000 DoS: Details and workaround

System affected: --------------- BinTec X4000 Router All firmware versions as far as I know, only verified with latest release 5.1.6 Patch 10 Machines with activated additional VPN software license are NOT affected, neither are machines which filter 1723/tcp. Description: ----------- As mentioned...

IPFilter 3.x - Fragment Rule Bypass

IPFilter 3.x - Fragment Rule Bypass source: https://www.securityfocus.com/bid/2545/info IPFilter is a packet filtering implementation that is in wide use on a variety of Unix systems. There exists a vulnerability in IPFilter that can allow an attacker to communicate with blocked ports on hosts...

CVE-2000-0334

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...

CVE-2000-0334: Undefined Security Weakness

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...

Novell BorderManager 3.0 EE - Encoded URL rule bypass

I suspect that this has already been defined, but I cannot find any reference to it. Setting secure areas on an intranet secured by URL rules within bordermanager can be bypassed by changing some of the characters in the URL with -encoded triplets. To access http://home.myintranet.com/secure use...

Серьезная уязвимость в IPFilter

RST-пакет посланый при использовании правила block return-rst воспринимается как "отпирающий" если в дальнейшем используется правило типа keep state. Дальнейшие атаки на данный порт не будут блокироваться...

CVE-2000-0334

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...

checkpoint-fw1.vuln.txt

There are two vulnerabilities in FW-1. The first is an authentication issue, the other is a configuration issue. Since I don't have a copy of 4.x FW-1 handy maybe someone can check it for me. 1 The basic authentication used in Checkpoint FW-1 used for inside/outbound and outside/inbound allows...

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service

Check Point Software Firewall-1 3.01 4.0 - Table Saturation Denial of Service source: https://www.securityfocus.com/bid/549/info A denial of service condition exists in some implementations of Firewall-1 by Checkpoint Software. This denial of service attack is possible due to the way Firewall-1...

ROS-2-2182

2.2182 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

Update Rollup 4 for Windows Server Solutions Best Practices Analyzer 1.0 is available

None None...

Laravel CRLF injection in default email rule

Summary A CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied...