CVE-2002-1520

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.

Published: Apr 2, 2003
Updated: Apr 13, 2023
CVE: CVE-2002-1520
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 10
AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
watchguard / firebox	10	10.x
watchguard / firebox	60	60.x
rapidstream / rapidstream	2000	2000.x
rapidstream / rapidstream	500	500.x
rapidstream / rapidstream	4000	4000.x
rapidstream / rapidstream	8000	8000.x
watchguard / firebox	80	80.x
watchguard / firebox	100	100.x
rapidstream / rapidstream	6000	6000.x

http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html
http://www.iss.net/security_center/static/10218.php
http://www.osvdb.org/4831
http://www.securityfocus.com/bid/5815

Vulnerability Database

290,206

CVE-2002-1520