CVE-2000-1022

Description

The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.

Affected products

• Cisco / pix_firewall_software4.2(1) – 4.2(1)
• Cisco / pix_firewall_software4.2(2) – 4.2(2)
• Cisco / pix_firewall_software4.2(5) – 4.2(5)
• Cisco / pix_firewall_software4.3 – 4.3
• Cisco / pix_firewall_software4.4(4) – 4.4(4)
• Cisco / pix_firewall_software5.0 – 5.0
• Cisco / pix_firewall_software5.1 – 5.1
• Cisco / pix_firewall_software5.2 – 5.2

Exploits & proofs of concept

• exploit-dbCisco PIX Firewall 4.x/5.x - SMTP Content Filtering Evasionby Lincoln Yeoh

References

• MISChttp://www.securityfocus.com/bid/1698
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/5277
• VENDOR_ADVISORYhttp://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
• MISChttp://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html