PT-2005-1389 · Ingate · Ingate Firewall

Neil Watson · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0311

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ingate Firewall versions 4.1.3 and earlier

Description The issue allows remote authenticated users to retain unauthorized access to resources because the PPTP session for an active user is not terminated when the administrator disables that user from a resource.

Recommendations For Ingate Firewall versions 4.1.3 and earlier, manually terminate the PPTP session for any user that has been disabled from a resource to prevent unauthorized access.

Fix

Related Identifiers

CVE-2005-0311

Affected Products

Ingate Firewall

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-0311 · Security Note
• http://secunia.com/advisories/14060 · Note
• http://ingate.com/relnote-422.php · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19123 · Note
• http://securitytracker.com/id?1013022 · Note
• http://marc.info/?l=bugtraq&m=110684375429946&w=2 · Note
• http://securityfocus.com/bid/12383 · Note