CVE-2002-1519 Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbi...
HighCVSS 10.0
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rapidstream | = 500 | No fix listed |
| rapidstream | = 2000 | No fix listed |
| rapidstream | = 4000 | No fix listed |
| rapidstream | = 6000 | No fix listed |
| rapidstream | = 8000 | No fix listed |
| WatchGuard firebox | = v10 | No fix listed |
| WatchGuard firebox | = v60 | No fix listed |
| WatchGuard firebox | = v80 | No fix listed |
| WatchGuard firebox | = v100 | No fix listed |
References
- 20020926 Watchguard firewall appliances security issues mailing-list
- 20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances mailing-list
- firebox-vclass-cli-format-string(10217) patch vdb-entry vendor-advisory
- 4924 vdb-entry
- 5814 patch vdb-entry vendor-advisory