PT-2001-1875 · Watchguard · Watchguard Firebox

Publicado

2001-09-20

·

Atualizado

2017-10-10

·

CVE-2001-0692

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox versions 4.5 through 4.6
Description: The issue allows a remote attacker to bypass firewall filtering. This is achieved by using a base64 MIME encoded email attachment with a boundary name that ends in two dashes.
Recommendations: For versions 4.5 and 4.6, consider restricting access to email attachments with suspicious boundary names until a fix is available. As a temporary workaround, monitor email traffic closely for potential bypass attempts.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2001-0692

Produtos afetados

Watchguard Firebox