WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
BID:4491
Info
WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
| Bugtraq ID: | 4491 |
| Class: | Design Error |
| CVE: |
CVE-2002-0528 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 10 2002 12:00AM |
| Updated: | Jul 11 2009 11:56AM |
| Credit: | Vulnerability discovery credited to Peter Gründl <[email protected]>. |
| Vulnerable: |
WatchGuard SOHO Firewall 5.0.35 |
| Not Vulnerable: |
WatchGuard SOHO Firewall 5.0.35 a |
Discussion
WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
SoHo firewall is a hardware firewall solution distributed and maintained by WatchGuard.
A problem introduced into the 5.0.35 firmware causes the dropping of arbitrary firewall rules. When a user configures IP restrictions on certain IP addresses, the firewall may drop restriction entries arbitrarily. This could allow a remote user unintended access to a supposedly secure network.
SoHo firewall is a hardware firewall solution distributed and maintained by WatchGuard.
A problem introduced into the 5.0.35 firmware causes the dropping of arbitrary firewall rules. When a user configures IP restrictions on certain IP addresses, the firewall may drop restriction entries arbitrarily. This could allow a remote user unintended access to a supposedly secure network.
Exploit / POC
WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
This vulnerability requires no exploit.
This vulnerability requires no exploit.
Solution / Fix
WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
Solution:
A fix is available:
WatchGuard SOHO Firewall 5.0.35
Solution:
A fix is available:
WatchGuard SOHO Firewall 5.0.35
-
WatchGuard SoHo Firewall 5.0.35a
LiveSecurity Login Required
https://www3.watchguard.com/archive/login.asp
References
WatchGuard SOHO Firewall Vanishing IP Restrictions Vulnerability
References:
References:
- WatchGuard Homepage (WatchGuard)