PT-2005-1389 · Ingate · Ingate Firewall

Neil Watson · Publicado 2005-02-10 · Atualizado 2017-07-11 · CVE-2005-0311

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ingate Firewall versions 4.1.3 and earlier

Description The issue allows remote authenticated users to retain unauthorized access to resources because the PPTP session for an active user is not terminated when the administrator disables that user from a resource.

Recommendations For Ingate Firewall versions 4.1.3 and earlier, manually terminate the PPTP session for any user that has been disabled from a resource to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2005-0311

Produtos afetados

Ingate Firewall

Referências · 7

• http://secunia.com/advisories/14060 · Nota
• http://ingate.com/relnote-422.php · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19123 · Nota
• http://securitytracker.com/id?1013022 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0311 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=110684375429946&w=2 · Nota
• http://securityfocus.com/bid/12383 · Nota