PT-2002-2053 · Watchguard · Watchguard Soho Firewall

Publicado 2002-08-31 · Atualizado 2008-09-05 · CVE-2002-1047

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Watchguard Soho Firewall version 5.0.35a

Description: The issue allows remote attackers to gain privileges with a correct password but an incorrect user name, affecting the FTP service.

Recommendations: For Watchguard Soho Firewall version 5.0.35a, update the FTP service configuration to properly validate user credentials, ensuring that both the username and password must be correct to gain access.

Correção

Identificadores relacionados

CVE-2002-1047

Produtos afetados

Watchguard Soho Firewall

Referências · 3

• http://iss.net/security_center/static/9511.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1047 · Nota de Segurança