PT-2003-1253 · Watchguard · Watchguard Rssa Appliance+1

Publicado 2003-04-02 · Atualizado 2008-09-05 · CVE-2002-1520

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox Vclass versions 3.2 and earlier WatchGuard RSSA Appliance version 3.0.2

Description The issue arises from the CLI interface not properly closing the SSH connection when a -N option is provided during authentication. This allows remote attackers to access the CLI with administrator privileges.

Recommendations For WatchGuard Firebox Vclass versions 3.2 and earlier, consider disabling the SSH connection option that allows for the -N flag until a patch is available. For WatchGuard RSSA Appliance version 3.0.2, restrict access to the CLI interface to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1520

Produtos afetados

Watchguard Firebox Vclass

Watchguard Rssa Appliance

Referências · 6

• http://iss.net/security_center/static/10218.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1520 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html · Nota
• http://osvdb.org/4831 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html · Nota
• http://securityfocus.com/bid/5815 · Aviso do Fabricante