6.5

CVE-2007-0188

F5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation of an IP address ("dotless IP address"), which allows remote authenticated users to connect to the FirePass administrator console and certain other network resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Firepass Version5.4
F5 ≫ Firepass Version5.4.1
F5 ≫ Firepass Version5.4.2
F5 ≫ Firepass Version5.4.3
F5 ≫ Firepass Version5.4.4
F5 ≫ Firepass Version5.4.5
F5 ≫ Firepass Version5.4.6
F5 ≫ Firepass Version5.4.7
F5 ≫ Firepass Version5.4.8
F5 ≫ Firepass Version5.4.9
F5 ≫ Firepass Version5.5
F5 ≫ Firepass Version5.5.1
F5 ≫ Firepass Version5.5.2
F5 ≫ Firepass Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.31% 0.669
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html
http://www.mnin.org/advisories/2007_firepass.pdf
http://www.securityfocus.com/bid/21957
http://secunia.com/advisories/23640
http://www.osvdb.org/32734
https://tech.f5.com/home/solutions/sol6922.html