Description (CNA)
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/1698
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5277
- http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
- http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
ADP enrichment
No English description supplied.