Secure Pix Firewall
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2000-1022 | 0.04 | — | 0.07 | Dec 11, 2000 | The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands. | |||
| CVE-2000-0613 | 0.04 | — | 0.09 | Mar 20, 2000 | Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections. | |||
| CVE-2000-1027 | 0.03 | — | 0.04 | Dec 11, 2000 | Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established. | |||
| CVE-2003-1109 | 0.01 | — | 0.07 | Dec 31, 2003 | The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via… | |||
| CVE-2006-3906 | 0.00 | — | 0.07 | Jul 27, 2006 | Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it… | |||
| CVE-2002-0954 | 0.00 | — | 0.01 | Oct 4, 2002 | The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques. | |||
| CVE-1999-0157 | 0.00 | — | 0.01 | Aug 18, 1998 | Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service. | |||
| CVE-1999-1582 | 0.00 | — | 0.02 | Jul 15, 1998 | By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if… |
- CVE-2000-1022Dec 11, 2000risk 0.04cvss —epss 0.07
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
- CVE-2000-0613Mar 20, 2000risk 0.04cvss —epss 0.09
Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, which allows remote attackers to force the firewall to close legitimate connections.
- CVE-2000-1027Dec 11, 2000risk 0.03cvss —epss 0.04
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
- CVE-2003-1109Dec 31, 2003risk 0.01cvss —epss 0.07
The Session Initiation Protocol (SIP) implementation in multiple Cisco products including IP Phone models 7940 and 7960, IOS versions in the 12.2 train, and Secure PIX 5.2.9 to 6.2.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via…
- CVE-2006-3906Jul 27, 2006risk 0.00cvss —epss 0.07
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it…
- CVE-2002-0954Oct 4, 2002risk 0.00cvss —epss 0.01
The encryption algorithms for enable and passwd commands on Cisco PIX Firewall can be executed quickly due to a limited number of rounds, which make it easier for an attacker to decrypt the passwords using brute force techniques.
- CVE-1999-0157Aug 18, 1998risk 0.00cvss —epss 0.01
Cisco PIX firewall and CBAC IP fragmentation attack results in a denial of service.
- CVE-1999-1582Jul 15, 1998risk 0.00cvss —epss 0.02
By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if…