CVE

Id
31735  
CVE No.
CVE-2008-1618  
Status
Candidate  
Description
The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341238 31735 CVE-2008-1618 MISC:http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf  View
341239 31735 CVE-2008-1618 BID:28619  View
341240 31735 CVE-2008-1618 URL:http://www.securityfocus.com/bid/28619  View
341241 31735 CVE-2008-1618 VUPEN:ADV-2008-1152  View
341242 31735 CVE-2008-1618 URL:http://www.vupen.com/english/advisories/2008/1152/references  View
341243 31735 CVE-2008-1618 OSVDB:44218  View
341244 31735 CVE-2008-1618 URL:http://www.osvdb.org/44218  View
341245 31735 CVE-2008-1618 SECTRACK:1019796  View
341246 31735 CVE-2008-1618 URL:http://www.securitytracker.com/id?1019796  View
341247 31735 CVE-2008-1618 SECUNIA:29708  View
341248 31735 CVE-2008-1618 URL:http://secunia.com/advisories/29708  View
341249 31735 CVE-2008-1618 XF:firebox-pptpvpn-mschapv2-info-disclosure(41683)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47598 JVNDB-2008-002908 GeeCarts における PHP リモートファイルインクルージョンの脆弱性 GeeCarts には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2008-1622 31735 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002908.html  View