292 matches found
CVE-2001-1104: Undefined Security Weakness
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
Weak TCP Sequence Numbers in Sonicwall SOHO Firewall
This may not seem bad, but to me it seems that this defeats the point of NAT if somebody can steal your sessions. Note the section on TCP sequence prediction. This was a Sonicwall SOHO firewall. ======= Host 192.168.1.254 appears to be up ... good. Initiating SYN half-open stealth scan against...
CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. CVE: CVE-2001-1104 Last updated: Sept. 5, 2008, 8:25 p.m...
CVE-2001-0376
CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...
CVE-2001-0376: Undefined Security Weakness
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...
CVE-2000-0896
WatchGuard SOHO Firewall is affected by CVE-2000-0896 via Fragmented IP Packet Attack. A flood of fragmented IP packets exhausts the device’s resources, causing it to stop forwarding packets and drop connections. ISS/X-Force notes remote exploitation could crash the configuration server or deny s...
CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...
CVE-2000-0896: Undefined Security Weakness
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...
CVE-2000-0895
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request...
CVE-2000-0896
WatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets...
CVE-2000-0894
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities...
CVE-2001-0049
WatchGuard SOHO Firewall 2.2.1 and earlier is affected by a denial-of-service vulnerability triggered by a large number of HTTP GET requests. The available descriptions identify the affected product and the impact but do not provide explicit root-cause details, affected subcomponents, versions be...
CVE-2001-0049: Undefined Security Weakness
WatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests...
CVE-2000-1097
The CVE-2000-1097 issue affects the SonicWALL SOHO firewall web server, where remote attackers can cause a denial of service by sending a long username in the authentication page. The connected SonicWall advisory (SNWLID-2000-0001) confirms the same description and highlights the vulnerability, b...
CVE-2000-1097
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page...
CVE-2000-1097: Undefined Security Weakness
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page...
SonicWALL SOHO username denial of service
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page. CVE: CVE-2000-1097 Last updated: Oct. 10, 2017, 1:29 a.m...
Soho Firewall CVE-2000-1098 Denial-Of-Service Vulnerability
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. CVE: CVE-2000-1098 Last updated: Sept. 5, 2008, 8:22 p.m...