Description
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.
References
- 20020926 Watchguard firewall appliances security issues mailing-list
- 20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances mailing-list
- firebox-vclass-cli-format-string(10217) vdb-entry
- 5814 vdb-entry
- 4924 vdb-entry