PT-2000-1937 · Cisco · Cisco Secure Pix Firewall

Publicado 2000-12-11 · Atualizado 2018-10-30 · CVE-2000-1027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure PIX Firewall version 5.2(2)

Description The issue allows remote attackers to determine the real IP address of a target FTP server. This is achieved by flooding the server with PASV requests. When passive mode is established, the response includes the real IP address.

Recommendations For Cisco Secure PIX Firewall version 5.2(2), consider restricting access to the FTP server to minimize the risk of exploitation. As a temporary workaround, limit the number of PASV requests allowed to prevent IP address disclosure.

Exploit

Correção

Identificadores relacionados

CVE-2000-1027

Produtos afetados

Cisco Secure Pix Firewall

Referências · 6

• 🔥 https://exploit-db.com/exploits/20369 · Exploit
• 🔥 http://securityfocus.com/bid/1877 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1027 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5646 · Nota
• http://osvdb.org/1623 · Nota
• http://marc.info/?l=bugtraq&m=97059440000367&w=2 · Nota