CVE-2002-1979

Published: Dec 31, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

WatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.

Affected (3)

Products: Watchguard: Legacy Rssa, Soho, Vclass

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Watchguard Legacy Rssa	Up to 3.2_sp1
Watchguard Soho	Up to 5.1.6
Watchguard Vclass	Up to 3.2_sp1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.kb.cert.org/vuls/id/328867

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/AAMN-5EQR65

Source: cve@mitre.org

Patch

http://www.kb.cert.org/vuls/id/328867

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/AAMN-5EQR65

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.