Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pix_firewall_software | Cisco | 5.2 (including) | 5.2 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=97059440000367\u0026w=2
- http://www.osvdb.org/1623
- http://www.securityfocus.com/bid/1877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5646
- http://marc.info/?l=bugtraq\u0026m=97059440000367\u0026w=2
- http://www.osvdb.org/1623
- http://www.securityfocus.com/bid/1877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5646