secure pix firewall vulnerabilities and exploits

(subscribe to this query)

NA

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and previous versions does not properly restrict access to SMTP commands, which allows remote malicious users to execute restricted commands by sending a DATA command before sending the restricted commands.

Cisco Pix Firewall Software 5.1 Cisco Pix Firewall Software 5.2 Cisco Pix Firewall Software 4.2\\(1\\)Cisco Pix Firewall Software 4.2\\(2\\)Cisco Pix Firewall Software 4.2\\(5\\)Cisco Pix Firewall Software 4.3 Cisco Pix Firewall Software 4.4\\(4\\)Cisco Pix Firewall Software 5.0

1 EDB exploit

NA

Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote malicious users to force the firewall to close legitimate connections.

Cisco Pix Firewall

1 EDB exploit

NA

Cisco Secure PIX Firewall 5.2(2) allows remote malicious users to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.

Cisco Pix Firewall Software 5.2

1 EDB exploit

NA

The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator prior to 3.1.3 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test...

Ingate Ingate Firewall Ingate Ingate Siparator

NA

The Session Initiation Protocol (SIP) implementation in multiple dynamicsoft products including y and certain demo products for AppEngine allows remote malicious users to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG...

Dynamicsoft Appengine

NA

webadmin.exe in Novell Nsure Audit 1.0.1 allows remote malicious users to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.

Novell Nsure Audit 1.0.1

NA

The Session Initiation Protocol (SIP) implementation in Columbia SIP User Agent (sipc) 1.74 and other versions before sipc 2.0 build 2003-02-21 allows remote malicious users to cause a denial of service or execute arbitrary code via crafted INVITE messages, as demonstrated by the...

Columbia University Sipc 1.74

NA

The Session Initiation Protocol (SIP) implementation in Nortel Networks Succession Communication Server 2000, when using SIP-T, allows remote malicious users to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG...

Nortel Succession Communication Server 2000

NA

The Session Initiation Protocol (SIP) implementation in IPTel SIP Express Router 0.8.9 and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip tes...

Iptel Sip Express Router 0.8.9 Iptel Sip Express Router 0.8.8

NA

Integer overflow in OpenSSL 0.9.6 and 0.9.7 allows remote malicious users to cause a denial of service (crash) via an SSL client certificate with certain ASN.1 tag values.

Openssl Openssl 0.9.6 Openssl Openssl 0.9.7

1 EDB exploit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook