CVE-2005-2889

CVE-2005-2889 concerns Check Point NGX R60 where the CIFS service group implementation may mishandle traffic not designated as CIFS. The CERT/Check Point entry notes that the CIFS service group could allow unintended traffic to pass or cause legitimate traffic to be dropped, depending on rule con...

Rule bypassing in CheckPoint NGX R60

Hi folks, as playing a little bit with CheckPoint NGX new release R60, I noticed a serious problem with the predefined service group "CIFS". This group includes the services called "microsoft-ds" TCP Port 445 and the predefined service group "NBT", which includes some old smb-stuff. If I use this...

Checkpoint NGX rule definition vulnerability

"CIFS" rule includes all traffic...

squid -- buffer overflow vulnerability in gopherToHTML

The squid patches page notes: A malicious gopher server may return a response with very long lines that cause a buffer overflow in Squid. Workaround: Since gopher is very obscure these days, do not allow Squid to any gopher servers. Use an ACL rule like: acl Gopher proto gopher httpaccess deny...

Mandrake Linux Security Advisory : iptables (MDKSA-2004:125)

Faheem Mitha discovered that the iptables tool would not always load the required modules on its own as it should have, which could in turn lead to firewall rules not being loaded on system startup in some cases. The updated packages are patched to prevent this problem. %NASLMINLEVEL 70300 C...

CVE-2002-1098

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound XML-Autoforward/in" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator...

CVE-2002-1098: Undefined Security Weakness

Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound XML-Autoforward/in" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator...

CVE-2004-0667

Rule Set Based Access Control RSBAC 1.2.2 through 1.2.3 allows access to syscreat, sysopen, and sysmknod inside jails, which could allow local users to gain elevated privileges...

CVE-2004-0667: Undefined Security Weakness

Rule Set Based Access Control RSBAC 1.2.2 through 1.2.3 allows access to syscreat, sysopen, and sysmknod inside jails, which could allow local users to gain elevated privileges...

Check Point FireWall-1 Spoofed UDP Packet Remote DoS

The machine or a router on the way crashed when it was flooded by incorrect UDP packets. This attack was known to work against FireWall-1 3.0, 4.0 or 4.1 An attacker may use this flaw to shut down this server, thus preventing you from working properly. C Tenable Network Security, Inc...

Apache Httpd < 1.3.31 : Allow/Deny parsing on big-endian 64-bit platforms

A bug in the parsing of Allow/Deny rules using IP addresses without a netmask on big-endian 64-bit platforms causes the rules to fail to match...

Cisco VPN 3000 Concentrator Multiple Vulnerabilities (CSCdx07754, CSCdx24622, CSCdx24632)

The remote VPN concentrator is subject to multiple flaws : - XML public rule - HTML pages access - HTML login processing This vulnerability is documented as Cisco bug ID CSCdx07754, CSCdx24622 and CSCdx24632. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his...

CVE-2001-1387

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak...

CVE-2001-1387: Observable Discrepancy

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak...

CVE-2002-0514

OpenBSD 3.0 PF with the return-rst rule is vulnerable. The RST packet’s TTL is set to 128, allowing remote attackers to infer whether a port is filtered by comparing TTL to the default. Affected component: PF rule handling in OpenBSD 3.0. Root cause: TTL manipulation in RST responses leads to dis...

PT-2002-1565 · Openbsd · Openbsd

Name of the Vulnerable Software and Affected Versions: OpenBSD version 3.0 Description: The issue allows remote attackers to determine if a port is being filtered due to the TTL being different from the default TTL in the RST packet. This occurs because the PF in OpenBSD 3.0 with the return-rst...

CVE-1999-1204

CVE-1999-1204 affects Check Point Firewall-1. It stems from improper handling of certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which can produce a rule defaulting to an ANY address and grant access to more systems than intended. CVSSv2 score 7.5 (HIGH) with Network...

Security Advisory FreeBSD-SA-01:53.ipfw

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:53 Security Advisory FreeBSD, Inc. Topic: ipfw me' on P2P interfaces matches remote address Category: core Module: ipfw Announced: 2001-08-17 Credits: Igor M Podlesny...

CVE-2001-0483

CVE-2001-0483 affects Axent Raptor Firewall 6.5. A configuration error allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy rule is not set. CVSS2 base score 7.5 (NETWORK, LOW auth, PARTIAL confidentiality/integrity/availability). Exploit d...

CVE-2001-0483: Undefined Security Weakness

Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set...