EUVD-2002-0522

Malware in sbrugna...

EUVD-2000-0881

Malware in sbrugna...

EUVD-2002-1036

Malware in sbrugna...

CVE-2000-0895

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request...

CVE-2000-0894

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...

CVE-2000-0895: Undefined Security Weakness

Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request...

CVE-2000-0894: Undefined Security Weakness

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...

CVE-2002-1047

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-1047

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-1047

The CVE-2002-1047 entry concerns the FTP service in Watchguard Soho Firewall 5.0.35a. The vulnerability, as described in multiple sources, allows remote attackers to gain privileges when supplying a correct password but an incorrect user name. The available documents do not specify the exact root...

CVE-2002-1047: Undefined Security Weakness

The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0528

CVE-2002-0528 affects Watchguard SOHO firewall 5.0.35. After upgrading to 5.0.35, the device unpredictably disables certain IP restrictions configured for customized services, enabling remote attackers to bypass the intended access control rules. Root cause described as upgrade-related misbehavio...

CVE-2002-0527

Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...

CVE-2002-0528

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...

CVE-2002-0528: Undefined Security Weakness

Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...

Weak TCP Sequence Numbers in Sonicwall SOHO Firewall

This may not seem bad, but to me it seems that this defeats the point of NAT if somebody can steal your sessions. Note the section on TCP sequence prediction. This was a Sonicwall SOHO firewall. ======= Host 192.168.1.254 appears to be up ... good. Initiating SYN half-open stealth scan against...

CVE-2000-0896

WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...

CVE-2000-0896

WatchGuard SOHO Firewall is affected by CVE-2000-0896 via Fragmented IP Packet Attack. A flood of fragmented IP packets exhausts the device’s resources, causing it to stop forwarding packets and drop connections. ISS/X-Force notes remote exploitation could crash the configuration server or deny s...

CVE-2000-0894

HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...