SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Firebox_2500 | Watchguard | 4.5 (including) | 4.5 (including) |
| Firebox_2500 | Watchguard | 4.6 (including) | 4.6 (including) |
| Firebox_4500 | Watchguard | 4.5 (including) | 4.5 (including) |
| Firebox_4500 | Watchguard | 4.6 (including) | 4.6 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=99379787421319\u0026w=2
- http://www.securityfocus.com/archive/1/189783
- http://www.securityfocus.com/bid/2855
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6682
- http://marc.info/?l=bugtraq\u0026m=99379787421319\u0026w=2
- http://www.securityfocus.com/archive/1/189783
- http://www.securityfocus.com/bid/2855
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6682