Watchguard FireboxII Password Retrieval Vulnerability
BID:2284
Info
Watchguard FireboxII Password Retrieval Vulnerability
| Bugtraq ID: | 2284 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2001 12:00AM |
| Updated: | Jan 20 2001 12:00AM |
| Credit: | This vulnerability was first announced to Bugtraq by Philip J Lewis <[email protected]> on January 20, 2001. |
| Vulnerable: |
WatchGuard FireboxII Firmware 4.5 WatchGuard FireboxII Firmware 4.4 WatchGuard FireboxII Firmware 4.3 WatchGuard FireboxII Firmware 4.2 WatchGuard FireboxII Firmware 4.1 WatchGuard FireboxII Firmware 4.0 |
| Not Vulnerable: | |
Discussion
Watchguard FireboxII Password Retrieval Vulnerability
FireboxII is a firewall package available from WatchGuard Technologies. FireboxII systems are developed in various sizes and strengths, and are available in different models to fit enterprise needs.
A problem with the firmware may allow remote users with read-only access to gain elevated privileges. The problem occurs in the handling of passwords by the FireboxII system. It is possible for a user with read-only access to the firewall to initiate an SSL connection through the proprietory libraries included with the administration tools. Upon connecting and executing the MPF command, a user can retrieve the binary /var/lib/mpf/keys.gz from flash memory which contains the hashed passwords of both the read-only and read-write. A remote user can then initiate connections through the library, using the hashed read-write password to modify configuration. This problem makes it possible for a user with malicious motives to gain control of the firewall, and allow access to resources which may be restricted, or potentially deny service to the network.
FireboxII is a firewall package available from WatchGuard Technologies. FireboxII systems are developed in various sizes and strengths, and are available in different models to fit enterprise needs.
A problem with the firmware may allow remote users with read-only access to gain elevated privileges. The problem occurs in the handling of passwords by the FireboxII system. It is possible for a user with read-only access to the firewall to initiate an SSL connection through the proprietory libraries included with the administration tools. Upon connecting and executing the MPF command, a user can retrieve the binary /var/lib/mpf/keys.gz from flash memory which contains the hashed passwords of both the read-only and read-write. A remote user can then initiate connections through the library, using the hashed read-write password to modify configuration. This problem makes it possible for a user with malicious motives to gain control of the firewall, and allow access to resources which may be restricted, or potentially deny service to the network.
Exploit / POC
Watchguard FireboxII Password Retrieval Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] .
Solution / Fix
Watchguard FireboxII Password Retrieval Vulnerability
Solution:
Upgrades available:
WatchGuard FireboxII Firmware 4.0
WatchGuard FireboxII Firmware 4.1
WatchGuard FireboxII Firmware 4.2
WatchGuard FireboxII Firmware 4.3
WatchGuard FireboxII Firmware 4.4
WatchGuard FireboxII Firmware 4.5
Solution:
Upgrades available:
WatchGuard FireboxII Firmware 4.0
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
WatchGuard FireboxII Firmware 4.1
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
WatchGuard FireboxII Firmware 4.2
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
WatchGuard FireboxII Firmware 4.3
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
WatchGuard FireboxII Firmware 4.4
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
WatchGuard FireboxII Firmware 4.5
-
WatchGuard 010107
https://www.watchguard.com/esupport.htm
References
Watchguard FireboxII Password Retrieval Vulnerability
References:
References: