medium5.0Public exploit code
CVE-2000-1027
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, whi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure2000-10-03 · remote · hardware · Verified
Impact
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Pix Firewall Software | Version 5.2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=97059440000367&w=2
- http://www.osvdb.org/1623
- http://www.securityfocus.com/bid/1877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5646
- http://marc.info/?l=bugtraq&m=97059440000367&w=2
- http://www.osvdb.org/1623
- http://www.securityfocus.com/bid/1877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5646