CVE-2005-0311

Ingate Firewall 4.1.3 and earlier does not terminate the PPTP session for an active user when the administrator disables that user from a resource, allowing remote authenticated users to retain access. Affected product: Ingate Firewall (versions up to 4.1.3 or earlier). Root cause: PPTP session n...

CVE-2007-3176

The CVE-2007-3176 entry describes a design/logic flaw in Ingate Firewall and SIParator prior to version 4.5.2 that can allow remote authenticated users with only partial privileges to download a Support Report. Content across multiple sources (NVD, CVE lists) confirms the affected product family ...

CVE-2007-6094

The CVE-2007-6094 entry describes a DoS vulnerability in the IPsec module of Ingate Firewall (and SIParator) prior to version 4.6.0. A remote attacker can crash the module by sending an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS). Affected products: Ingate Firewall before 4.6....

CVE-2006-2924

CVE-2006-2924 affects Ingate Firewall (SIP module) and SIParator pre-4.4.1. When TLS/SSL is enabled, remote attackers can cause a crash via a crafted SSL/TLS handshake, leading to denial of service. The connected documents indicate the issue is tied to TLS/SSL handshakes but do not provide explic...

CVE-2007-3177

Ingate Firewall and SIParator are affected prior to version 4.5.2. The vulnerability allows remote attackers to bypass SIP authentication via a specific maddr parameter, effectively defeating authentication for SIP sessions. The advisory wording indicates the issue exists in versions before 4.5.2...

CVE-2007-6092

CVE-2007-6092 affects Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 via a buffer overflow in libsrtp. The available descriptions state unknown impact and attack vectors, with uncertainty about privilege boundaries. No remediation or mitigation details are provided in the connected d...

CVE-2007-6099

Technical details (affected products, versions, root cause, and remediation) are not publicly provided in the connected documents. Monitor for updates from Red Hat, NVD, and vendors for concrete exposure, fixes, and mitigations.

CVE-2006-2925

This CVE (CVE-2006-2925) affects Ingate Firewall and SIParator prior to version 4.4.1, where the web interface is vulnerable to Cross-Site Scripting (XSS). The root cause is an XSS weakness in the administrator-facing web interface that could allow remote attackers to inject arbitrary scripts or ...

CVE-2007-6097

Affected products: Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The vulnerability lies in their ICMP implementation, with the issue described as ICMP packets being “incorrectly accepted.” The impact is not explicitly quantified in the provided documents, but the CVE notes unknown ...

CVE-2007-6095

The CVE-2007-6095 entry applies to the SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0. When Remote NAT Traversal is used, the system does not correctly perform user registration and message distribution, which may allow remote authenticated users to receive messages inte...

CVE-2007-6093

CVE-2007-6093 affects Ingate Firewall and SIParator prior to 4.6.0; the SRTP implementation can be coerced into a kernel crash (DoS) by an RTCP index that is ‘much more than expected.’ Upgrading to version 4.6.0 or later is the stated mitigation.

CVE-2007-6098

CVE-2007-6098 affects Ingate Firewall (before 4.6.0) and SIParator (before 4.6.0). The issue is that the products do not log certain traffic (truncated ICMP, UDP, and TCP packets) and do not log serial-console login attempts with nonexistent usernames. The description notes unknown impact and rem...

CVE-2003-1112

The CVE-2003-1112 entry applies to the SIP implementation in Ingate Firewall and Ingate SIParator prior to version 3.1.3. A crafted INVITE message can trigger denial of service and, possibly, remote code execution, as demonstrated by the OUSPG PROTOS c07-sip tests. Remediation: upgrade to version...

CVE-2007-6096

Ingate Firewall before 4.6.0 and SIParator before 4.6.0 store passwords for “administrators with less privileges” in cleartext, enabling possible reading by an attacker via unspecified vectors. Affected components are the password storage mechanism; root cause indicated as cleartext storage. No e...