First published: Mon Dec 11 2000(Updated: )
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco PIX Firewall | =5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-1027 is considered a moderate severity vulnerability due to the exposure of sensitive information.
To mitigate CVE-2000-1027, upgrade to a version of Cisco PIX Firewall that is not affected by this vulnerability.
CVE-2000-1027 can lead to the exposure of the real IP addresses of FTP servers on your network, potentially allowing remote attackers to exploit this information.
CVE-2000-1027 primarily affects older versions of Cisco PIX Firewall, so its relevance will depend on the software in use.
The attack vector for CVE-2000-1027 is remote exploitation through flooding the FTP server with PASV requests.