CVE-1999-0158: Medium severity Cisco Pix Firewall Software vulnerability
Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Cisco PIX firewall manager (PFM)from your environment.Uninstall the PFM application from the Windows NT server if the tool is not required.
- Configuration
Disable or stop the PFM HTTP service or reconfigure PFM so it does not listen on TCP port 8080 to prevent remote retrieval of files.
Cisco PIX firewall manager (PFM) on Windows NT HTTP service (port 8080) listening = disabled - Compensating control
Block or restrict access to TCP port 8080 on the PFM server at network perimeter devices and host-based firewalls; allow access only from trusted management hosts or networks via ACLs or firewall rules.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0158?
CVE-1999-0158 is considered a high severity vulnerability due to the potential for unauthorized file access on the Cisco PIX firewall manager.
How do I fix CVE-1999-0158?
To remediate CVE-1999-0158, it is recommended to upgrade to a version of Cisco PIX firewall software that is not affected by this vulnerability.
What systems are affected by CVE-1999-0158?
CVE-1999-0158 affects Cisco PIX firewall software versions 4.1(6) and 4.2(1) on Windows NT.
What can an attacker do with CVE-1999-0158?
An attacker exploiting CVE-1999-0158 can connect to the PFM server on port 8080 and retrieve any file if they know its name and location.
Is CVE-1999-0158 still relevant today?
While CVE-1999-0158 is an old vulnerability, it remains relevant for organizations still using affected versions of Cisco PIX firewall software.