Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-1027 — Cisco PIX Firewall Software vulnerability

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
13.4%
top 5.78%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Cisco PIX Firewall Software
Timeline
PublishedDec 11
Latest updateApr 30

Description

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-vmw8-4qxc-x5wf: Cisco Secure PIX Firewall 5↗2022-04-30
▶
CVEList
CVE-2000-1027: Cisco Secure PIX Firewall 5↗2001-01-22
▶

💥Exploits & PoCs

1
Exploit-DB
Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure↗2000-10-03
▶