Lucene search

K
cveMitreCVE-2007-6095
HistoryNov 22, 2007 - 12:46 a.m.

CVE-2007-6095

2007-11-2200:46:00
CWE-200
mitre
web.nvd.nist.gov
22
ingate firewall
sip component
user registration
message distribution
vulnerability
remote nat traversal
cve-2007-6095
nvd

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

58.6%

The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users.

Affected configurations

Nvd
Node
ingateingate_firewallRange4.5.2
OR
ingateingate_siparatorRange4.5.2
VendorProductVersionCPE
ingateingate_firewall*cpe:2.3:h:ingate:ingate_firewall:*:*:*:*:*:*:*:*
ingateingate_siparator*cpe:2.3:h:ingate:ingate_siparator:*:*:*:*:*:*:*:*

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

58.6%

Related for CVE-2007-6095