Archive

Welcome to the Firewalls section within our archives. Please select a advisory below by clicking on it.

Last Modified: 1/2/2005

Checkpoint Firewall 1 Proxy bypass
The HTTP proxy can be used for more then HTTP.

Tiny Personal Firewall 3.0 D.O.S.
Denial of Service condition on version 3.0.

Snap Gear 1.5.3-4 Denial of Service
Versions 1.5.3 and 1.5.4 contain a denial of service attack.

Watchguard SOHO Denial of Service
Versions before 5.0.35 can be crashed if a specially crafted packet is sent.

Trend Micro Officescan Advisory
A hole exists that can allow a attacker to gain an encrypted password from a configuration file. This password is easy to decrypt and can allow further exploitation of remote host.

Cisco PIX WebAdmin Full Access hole
A hole exists that can allow a attacker to gain administrative priviledges on a cisco PIX firewall via the web interface.

Trend Micro eManager MULTIPLE Buffer overflows
Multiple buffer overflows in some CGI programs this product uses can allow a attacker to execute commands remotely.

Gauntlet Firewall
It is possible to execute commands on this firewall and bypass the filters. This is the CERT warning of this advisory.

Baltimore WebSweeper Url Bypass
BY sending a specially crafted url you can bypass the filter functions of this product.

WinWrapper Professional Firewall 2.0 Remote File viewing
A hole exists that allows a attacker to send a .. request to this firewall on port 4096 and read remote files.

PIX Firewall stats revealed
A hole exists in the PIX firewall that can release some information on the firewalls statistics. (Original Bugtraq post Included)

VPN-1 Checkpoint-1 Format String
A hole exists that could allow someone to take control over the management station. This of course isn't a good thing.

RDP Bypass Firewall bypass
A hole exists that could allow a attacker to send certain types of packets around a firewall.

Interscan VirusWall For NT Advisories
interscan.dll Overflows
HttpSaveCSP.dll and HttpSaveCVP.dll Overflows
RegGo.dll Overflow
smtpscan.dll Overflow
FtpSaveCSP.dll Overflow
FtpSave.dll Overflow
HttpSave.dll Overflow
There are a few overflows in various dll files from this product. If you are running it ether unplug it or read these advisories.