RSS   Vulnerabilities for 'Firebox pptp vpn'   RSS

2008-04-07
 
CVE-2008-1618

CWE-200
 

 
The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.

 

 >>> Vendor: Watchguard 15 Products
Firebox
Soho firewall
Firebox ii
Firebox 2500
Firebox 4500
Legacy rssa
SOHO
Vclass
Serverlock
Firebox pptp vpn
XCS
Watchguard system manager
Fireware
Rapidstream
Hawkeye g


Copyright 2019, cxsecurity.com

 

Back to Top