PT-2000-1937 · Cisco · Cisco Secure Pix Firewall

Published 2000-12-11 · Updated 2018-10-30 · CVE-2000-1027

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure PIX Firewall version 5.2(2)

Description The issue allows remote attackers to determine the real IP address of a target FTP server. This is achieved by flooding the server with PASV requests. When passive mode is established, the response includes the real IP address.

Recommendations For Cisco Secure PIX Firewall version 5.2(2), consider restricting access to the FTP server to minimize the risk of exploitation. As a temporary workaround, limit the number of PASV requests allowed to prevent IP address disclosure.

Exploit

Fix

Related Identifiers

CVE-2000-1027

Affected Products

Cisco Secure Pix Firewall

References · 6

• 🔥 https://exploit-db.com/exploits/20369 · Exploit
• 🔥 http://securityfocus.com/bid/1877 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-1027 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5646 · Note
• http://osvdb.org/1623 · Note
• http://marc.info/?l=bugtraq&m=97059440000367&w=2 · Note