Cisco PIX Firewall Manager File Exposure

Bugtraq ID:	691
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 31 1998 12:00AM
Updated:	Aug 31 1998 12:00AM
Credit:	This vulnerability was discovered by Brett Oliphant (Brett_M_Oliphant/[email protected]) and reported to Bugtraq on 31 August 1998.
Vulnerable:	Cisco PIX Firewall 4.2.1 Cisco PIX Firewall 4.1.6
Not Vulnerable:	Cisco PIX Firewall 4.2.2 Cisco PIX Firewall 4.1.6 b

Cisco PIX Firewall Manager File Exposure

It is reported that Cisco PIX Firewall products contain a vulnerability in their management software that allows remote attackers to retrieve arbitrary files
from the web server computer.

This application runs on Microsoft Windows, as 'Administrator'.

The application improperly allows an attacker to request arbitrary files from the hosting computer. This includes network attached storage, such as CIFS network shares.

This vulnerability allows an attacker to retrieve potentially sensitive files which may aid them in further compromise.

Cisco PIX Firewall Manager File Exposure

see discussion

Cisco PIX Firewall Manager File Exposure

Solution:
This vulnerability has been assigned Cisco Bug ID CSCdk39378.

A free fix is available for version 4.1(6). No fix will be made available for version 4.2(1). Those users are advised to either up or downgrade.

Cisco PIX Firewall Manager File Exposure

References:

• Cisco Product Security Incident Response (Cisco Systems)