Vulnerabilities > Ingate > High

DATE CVE VULNERABILITY TITLE RISK
2007-11-22 CVE-2007-6098 Multiple vulnerability in Ingate Firewall And SIParator
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
network
low complexity
ingate
7.5
2007-11-22 CVE-2007-6093 Improper Input Validation vulnerability in Ingate Firewall and Ingate Siparator
The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."
network
ingate CWE-20
7.1
2007-01-18 CVE-2007-0334 Authentication Replay vulnerability in InGate Firewall And SIParator
Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors.
network
low complexity
ingate
7.5
2005-12-22 CVE-2005-4464 Remote Kernel Deadlock Denial Of Service vulnerability in Ingate Firewall and SIParator
Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet in response.
network
low complexity
ingate
7.8
2003-12-31 CVE-2003-1112 Unspecified vulnerability in Ingate Firewall and Ingate Siparator
The Session Initiation Protocol (SIP) implementation in Ingate Firewall and Ingate SIParator before 3.1.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite.
network
low complexity
ingate
7.5