| Vulnerability Name: | CVE-2007-0187 (CCN-31439) | ||||||||
| Assigned: | 2007-01-05 | ||||||||
| Published: | 2007-01-05 | ||||||||
| Updated: | 2008-11-15 | ||||||||
| Summary: | F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading slashes, (3) Unicode encoding, (4) URL-encoded directory traversal or same-directory characters, or (5) upper case letters in the domain name. | ||||||||
| CVSS v3 Severity: | 7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
6.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N/E:H/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Fri Jan 05 2007 - 18:09:26 CST NNL-Labs & MNIN - F5 FirePass Security Advisory Source: FULLDISC Type: UNKNOWN 20070105 NNL-Labs & MNIN - F5 FirePass Security Advisory Source: MITRE Type: CNA CVE-2007-0187 Source: FULLDISC Type: UNKNOWN 20070106 NNL-Labs & MNIN - F5 FirePass Security Advisory Source: OSVDB Type: UNKNOWN 39167 Source: CCN Type: SA23626 FirePass URL Restriction Bypass Source: SECUNIA Type: UNKNOWN 23626 Source: CCN Type: SA23640 FirePass URL Restriction Bypass Vulnerabilities Source: SECUNIA Type: UNKNOWN 23640 Source: CCN Type: F5 Networks FirePass Web site FirePass - SSL VPN solution from F5 Networks Source: MISC Type: UNKNOWN http://www.mnin.org/advisories/2007_firepass.pdf Source: CCN Type: OSVDB ID: 39167 F5 FirePass Multiple Method URL Restriction Bypass Source: BID Type: UNKNOWN 21957 Source: CCN Type: BID-21957 F5 Firepass Multiple Input Validation Vulnerabilities Source: XF Type: UNKNOWN firepass-url-security-bypass(31439) Source: CONFIRM Type: UNKNOWN https://tech.f5.com/home/solutions/sol6916.html Source: CONFIRM Type: UNKNOWN https://tech.f5.com/home/solutions/sol6924.html | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||