high7.5Public exploit code
CVE-2000-1022
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to exec…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasion2000-09-19 · remote · hardware · Verified
Impact
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Pix Firewall Software | Versions 4.2\(1\), 4.2\(2\), 4.2\(5\), 4.3, 4.4\(4\), 5.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
- http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
- http://www.securityfocus.com/bid/1698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5277
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
- http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
- http://www.securityfocus.com/bid/1698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5277