Unscored severity · published Dec 11, 2000
CVE-2000-1022
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted…
–
CVSS
7.1%
EPSS
No
On KEV
Description
The mailguard feature in Cisco Secure PIX Firewall 5.2(2) and earlier does not properly restrict access to SMTP commands, which allows remote attackers to execute restricted commands by sending a DATA command before sending the restricted commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pix Firewall Software · Cisco
4.2(1); 4.2(2); 4.2(5); 4.3; 4.4(4); 5.0; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-1022
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-1022
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-09/0222.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-09/0241.html
www.cisco.com
http://www.cisco.com/warp/public/707/PIXfirewallSMTPfilter-pub.shtml
Exploit
http://www.securityfocus.com/bid/1698
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5277
More from Pix Firewall Software
8.8
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
–
CVE-2013-0149
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488…
–
CVE-2008-0028
Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL)…
–
CVE-2007-0962
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x before 2.3(4.12) and 3.x before 3.1(3.24), when "inspect http"…
–
CVE-2007-0959
Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols, allows remote attackers to cause a denial of service (device…