2362 matches found
CVE-2001-1104: Undefined Security Weakness
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
Linksys BEFVP41 VPN Server does not follow proper VPN standards
Dear all, A month ago, we discovered a bug in the VPN Server module of the Linksys EtherFast BEFVP41 Cable/DSL VPN Router. Here's the detailed email we sent to Linksys Tech Support: Begin Email Dear Support @ Linksys, We recently heard about your BEFVP41 and thought we'd try it out as we liked th...
Weak TCP Sequence Numbers in Sonicwall SOHO Firewall
This may not seem bad, but to me it seems that this defeats the point of NAT if somebody can steal your sessions. Note the section on TCP sequence prediction. This was a Sonicwall SOHO firewall. ======= Host 192.168.1.254 appears to be up ... good. Initiating SYN half-open stealth scan against...
CVE-2001-1104
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions...
SonicWALL SOHO Firewall Predictable TCP Initial Sequence Number Vulnerability
SonicWALL SOHO uses easily predictable TCP sequence numbers, which allows remote attackers to spoof or hijack sessions. CVE: CVE-2001-1104 Last updated: Sept. 5, 2008, 8:25 p.m...
CVE-2001-0376
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...
CVE-2001-0376
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...
CVE-2001-0376
CVE-2001-0376 affects SonicWALL Tele2 and SOHO firewalls running firmware 6.0.0.0 when using IPsec with IKE pre-shared keys. The root cause is that the implementation supports only 48-byte IKE PSKs instead of the full 128-byte length, reducing the effective key space. This enables a remote attack...
CVE-2001-0376: Undefined Security Weakness
SonicWALL Tele2 and SOHO firewalls with 6.0.0.0 firmware using IPSEC with IKE pre-shared keys do not allow for the use of full 128 byte IKE pre-shared keys, which is the intended design of the IKE pre-shared key, and only support 48 byte keys. This allows a remote attacker to brute force attack t...
CVE-2000-1097
The CVE-2000-1097 issue affects the SonicWALL SOHO firewall web server, where remote attackers can cause a denial of service by sending a long username in the authentication page. The connected SonicWall advisory (SNWLID-2000-0001) confirms the same description and highlights the vulnerability, b...
CVE-2000-1097
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page...
CVE-2000-1097: Undefined Security Weakness
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page...
Soho Firewall CVE-2000-1098 Denial-Of-Service Vulnerability
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request. CVE: CVE-2000-1098 Last updated: Sept. 5, 2008, 8:22 p.m...
CVE-2000-1097
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page...
CVE-2000-1098
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request...
SonicWALL SOHO username denial of service
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page. CVE: CVE-2000-1097 Last updated: Oct. 10, 2017, 1:29 a.m...
CVE-2000-1098
The CVE-2000-1098 entry concerns the web server component of the SonicWALL SOHO firewall. A remote attacker can cause a denial of service by sending an empty GET or POST request, impacting availability (CVSS: Network vector, low complexity, no authentication, partial availability impact). Public ...
CVE-2000-1098
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request...
CVE-2000-1098: Undefined Security Weakness
The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via an empty GET or POST request...