Sign-up

ID

VAR-200711-0146


CVE

CVE-2007-6099


TITLE

Ingate Firewall and SIParator Vulnerable to unauthorized operation

Trust: 0.8

sources: JVNDB: JVNDB-2007-004669

DESCRIPTION

Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities. Ingate Siparator is prone to a denial-of-service vulnerability. Unknown vulnerabilities exist in Ingate Firewall and SIParator

Trust: 1.98

sources: NVD: CVE-2007-6099 // JVNDB: JVNDB-2007-004669 // BID: 85254 // VULHUB: VHN-29461

AFFECTED PRODUCTS

vendor:ingatemodel:siparatorscope:lteversion:4.5.2

Trust: 1.0

vendor:ingatemodel:firewallscope:lteversion:4.5.2

Trust: 1.0

vendor:ingatemodel:firewallscope:ltversion:4.6.0

Trust: 0.8

vendor:ingatemodel:siparatorscope:ltversion:4.6.0

Trust: 0.8

vendor:ingatemodel:firewallscope:eqversion:4.5.2

Trust: 0.6

vendor:ingatemodel:siparatorscope:eqversion:4.5.2

Trust: 0.6

sources: JVNDB: JVNDB-2007-004669 // CNNVD: CNNVD-200711-327 // NVD: CVE-2007-6099

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2007-6099
value: HIGH

Trust: 1.0

NVD: CVE-2007-6099
value: HIGH

Trust: 0.8

CNNVD: CNNVD-200711-327
value: CRITICAL

Trust: 0.6

VULHUB: VHN-29461
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2007-6099
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-29461
severity: HIGH
baseScore: 10.0
vectorString: AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-29461 // JVNDB: JVNDB-2007-004669 // CNNVD: CNNVD-200711-327 // NVD: CVE-2007-6099

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

problemtype:CWE-DesignError

Trust: 0.8

sources: JVNDB: JVNDB-2007-004669 // NVD: CVE-2007-6099

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200711-327

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200711-327

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2007-004669

PATCH
title:Ingate Firewallurl:http://www.ingate.com/firewalls.php
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2007-004669

EXTERNAL IDS
db:NVDid:CVE-2007-6099
Trust: 2.8
db:JVNDBid:JVNDB-2007-004669
Trust: 0.8
db:CNNVDid:CNNVD-200711-327
Trust: 0.6
db:BIDid:85254
Trust: 0.4
db:VULHUBid:VHN-29461
Trust: 0.1
sources:
            
            
            VULHUB: VHN-29461 // 
            
            
            
            BID: 85254 // 
            
            
            
            JVNDB: JVNDB-2007-004669 // 
            
            
            
            CNNVD: CNNVD-200711-327 // 
            
            
            
            NVD: CVE-2007-6099

REFERENCES
url:http://www.ingate.com/relnote-460.php
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-6099
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-6099
Trust: 0.8
sources:
            
            
            VULHUB: VHN-29461 // 
            
            
            
            BID: 85254 // 
            
            
            
            JVNDB: JVNDB-2007-004669 // 
            
            
            
            CNNVD: CNNVD-200711-327 // 
            
            
            
            NVD: CVE-2007-6099

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 85254

SOURCES
db:VULHUBid:VHN-29461
db:BIDid:85254
db:JVNDBid:JVNDB-2007-004669
db:CNNVDid:CNNVD-200711-327
db:NVDid:CVE-2007-6099

LAST UPDATE DATE
2024-11-23T22:57:11.847000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-29461date:2008-09-05T00:00:00
db:BIDid:85254date:2007-11-21T00:00:00
db:JVNDBid:JVNDB-2007-004669date:2012-09-25T00:00:00
db:CNNVDid:CNNVD-200711-327date:2007-11-23T00:00:00
db:NVDid:CVE-2007-6099date:2024-11-21T00:39:21.447

SOURCES RELEASE DATE
db:VULHUBid:VHN-29461date:2007-11-22T00:00:00
db:BIDid:85254date:2007-11-21T00:00:00
db:JVNDBid:JVNDB-2007-004669date:2012-09-25T00:00:00
db:CNNVDid:CNNVD-200711-327date:2007-11-21T00:00:00
db:NVDid:CVE-2007-6099date:2007-11-22T00:46:00