257 matches found
CVE-2002-0527
Watchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service crash and reboot when SOHO forwards a packet with bad IP options...
CVE-2002-0528
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules...
CVE-2002-0527
Watchguard SOHO firewall before 5.0.35 is affected by a vulnerability where a remotely sent packet with bad IP options can cause the device to crash and reboot. The issue arises in the IP option handling path of the firewall, leading to a denial of service. No specific exploit details, affected v...
CVE-2002-0528
CVE-2002-0528 affects Watchguard SOHO firewall 5.0.35. After upgrading to 5.0.35, the device unpredictably disables certain IP restrictions configured for customized services, enabling remote attackers to bypass the intended access control rules. Root cause described as upgrade-related misbehavio...
Sonicwall SOHO Content Blocking Script Injection, LogFile Denial of Service
This advisory may be reproduced unmodified. Sonicwall SOHO Content Blocking Script Injection and Logfile DoS Test Unit : Sonicwall SOHO3 Firmware version: 6.3.0.0 ROM version: 5.0.1.0 Severity : Medium Issue : Sonicwall Allows administrators to block websites based on a user entered list of...
IP filtering problems in Watchguard SOHO
IP filtering rules may fail sometimes...
KPMG-2002008: Watchguard SOHO IP Restrictions Flaw
-------------------------------------------------------------------- -=Watchguard SOHO IP Restrictions Flaw=- courtesy of KPMG Denmark BUG-ID: 2002008 Released: 10th Apr 2002 -------------------------------------------------------------------- Problem: ======== A flaw in the Watchguard SOHO...
Watchguard SOHO DoS
Invalid IP option flood causes device to crash...
KPMG-2002007: Watchguard SOHO Denial of Service
-------------------------------------------------------------------- -=Watchguard SOHO Denial of Service=- Brought to you by KPMG Denmark BUG-ID: 2002007 Released: 08th apr, 2002 -------------------------------------------------------------------- Problem: ======== Sending TCP traffic with bad IP...
CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
CVE-2001-1104
SonicWALL SOHO is affected by CVE-2001-1104 due to predictable TCP Initial Sequence Numbers, enabling remote attackers to spoof/hijack sessions. The vulnerability affects the firewall component handling TCP connections; exploitation could allow session hijacking without user interaction. A remedi...
Weak TCP Sequence Numbers in Sonicwall SOHO Firewall
This may not seem bad, but to me it seems that this defeats the point of NAT if somebody can steal your sessions. Note the section on TCP sequence prediction. This was a Sonicwall SOHO firewall. ======= Host 192.168.1.254 appears to be up ... good. Initiating SYN half-open stealth scan against...
CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. CVE: CVE-2001-1104 Last updated: Sept. 5, 2008, 8:25 p.m...
CVE-2001-0376
CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...
CVE-2000-0896
WatchGuard SOHO Firewall is affected by CVE-2000-0896 via Fragmented IP Packet Attack. A flood of fragmented IP packets exhausts the device’s resources, causing it to stop forwarding packets and drop connections. ISS/X-Force notes remote exploitation could crash the configuration server or deny s...
CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...
CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...
CVE-2000-0894
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...