ingate ingate siparator vulnerabilities and exploits

(subscribe to this query)

NA

Ingate Firewall in the SIP module prior to 4.4.1 and SIParator prior to 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote malicious users to cause a denial of service (crash) via a crafted SSL/TLS handshake.

Ingate Ingate Siparator 4.3.4 Ingate Ingate Firewall Ingate Ingate Siparator Ingate Ingate Firewall 4.3.4

NA

Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall prior to 4.4.1 and SIParator prior to 4.4.1 allows remote malicious users to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in adm...

Ingate Ingate Firewall 4.3.1 Ingate Siparator 4.3.1 Ingate Ingate Firewall Ingate Siparator

NA

Unspecified vulnerability in Ingate Firewall and SIParator prior to 4.5.2 allows remote authenticated users without full privileges to download a Support Report.

Ingate Ingate Firewall Ingate Ingate Siparator

NA

Ingate Firewall and SIParator prior to 4.5.2 allow remote malicious users to bypass SIP authentication via a certain maddr parameter.

Ingate Ingate Firewall Ingate Ingate Siparator

NA

The SRTP implementation in Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 allows remote malicious users to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."

Ingate Ingate Firewall Ingate Ingate Siparator

NA

The SIP component in Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users...

Ingate Ingate Firewall Ingate Ingate Siparator

NA

Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for...

Ingate Ingate Firewall Ingate Ingate Siparator

NA

Buffer overflow in libsrtp in Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 has unknown impact and attack vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Ingate Ingate Firewall Ingate Ingate Siparator

NA

The IPsec module in the VPN component in Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 allows remote malicious users to cause a denial of service (module crash) via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS).

Ingate Ingate Siparator Ingate Ingate Firewall

NA

Ingate Firewall prior to 4.6.0 and SIParator prior to 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow malicious users to read these passwords via unknown vectors.

Ingate Ingate Firewall Ingate Ingate Siparator

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook