The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/5815 | Patch Vendor Advisory |
http://www.iss.net/security_center/static/10218.php | Patch Vendor Advisory |
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html | |
http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html | |
http://www.osvdb.org/4831 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2003-04-01 21:00
Updated : 2008-09-05 13:30
NVD link : CVE-2002-1520
Mitre link : CVE-2002-1520
JSON object : View
CWE
Products Affected
watchguard
- firebox
rapidstream
- rapidstream