PT-2002-2053 · Watchguard · Watchguard Soho Firewall

Published 2002-08-31 · Updated 2008-09-05 · CVE-2002-1047

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Watchguard Soho Firewall version 5.0.35a

Description: The issue allows remote attackers to gain privileges with a correct password but an incorrect user name, affecting the FTP service.

Recommendations: For Watchguard Soho Firewall version 5.0.35a, update the FTP service configuration to properly validate user credentials, ensuring that both the username and password must be correct to gain access.

Fix

Related Identifiers

CVE-2002-1047

Affected Products

Watchguard Soho Firewall

References · 3

• http://iss.net/security_center/static/9511.php · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1047 · Security Note