Vulnerabilities > CVE-2007-0187 - Input Validation vulnerability in F5 Firepass

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
f5
NVD
Published: 2007-01-12
Updated: 2008-11-15

Summary

F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading slashes, (3) Unicode encoding, (4) URL-encoded directory traversal or same-directory characters, or (5) upper case letters in the domain name.

Vulnerable Configurations

Part Description Count
Hardware
F5
14

References