CVE-2002-1519 - Vulnerability Details - OpenCVE

Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Rapidstream	Rapidstream
Watchguard	Firebox

Configuration 1 [-]

OR	cpe:2.3:h:rapidstream:rapidstream:500:::::::*
	cpe:2.3:h:rapidstream:rapidstream:2000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:4000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:6000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:8000:::::::*
	cpe:2.3:h:watchguard:firebox:v10:::::::*
	cpe:2.3:h:watchguard:firebox:v60:::::::*
	cpe:2.3:h:watchguard:firebox:v80:::::::*
	cpe:2.3:h:watchguard:firebox:v100:::::::*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html
http://www.iss.net/security_center/static/10217.php
http://www.osvdb.org/4924
http://www.securityfocus.com/bid/5814

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-01T04:00:00

Updated: 2024-08-08T03:26:28.676Z

Reserved: 2003-02-23T00:00:00

Link: CVE-2002-1519

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2003-04-02T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2002-1519

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2002-09-27T00:00:00", "descriptions": [{"lang": "en", "value": "Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2004-08-18T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20020926 Watchguard firewall appliances security issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "firebox-vclass-cli-format-string(10217)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/10217.php"}, {"name": "5814", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/5814"}, {"name": "4924", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/4924"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2002-1519", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20020926 Watchguard firewall appliances security issues", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "firebox-vclass-cli-format-string(10217)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/10217.php"}, {"name": "5814", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5814"}, {"name": "4924", "refsource": "OSVDB", "url": "http://www.osvdb.org/4924"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T03:26:28.676Z"}, "title": "CVE Program Container", "references": [{"name": "20020926 Watchguard firewall appliances security issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "firebox-vclass-cli-format-string(10217)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "http://www.iss.net/security_center/static/10217.php"}, {"name": "5814", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/5814"}, {"name": "4924", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/4924"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2002-1519", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2003-02-23T00:00:00", "dateUpdated": "2024-08-08T03:26:28.676Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:rapidstream:rapidstream:500:*:*:*:*:*:*:*", "matchCriteriaId": "1BEFE717-99B9-4BA1-B221-B35C3B43CDB6", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:2000:*:*:*:*:*:*:*", "matchCriteriaId": "C13F6038-2FB7-4814-A058-D6192963474E", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:4000:*:*:*:*:*:*:*", "matchCriteriaId": "03CD6CE7-23B7-4A45-82C0-A5F10AD9CC55", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:6000:*:*:*:*:*:*:*", "matchCriteriaId": "653929D6-6E9F-470F-B3DB-95F5E14D2AC0", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:8000:*:*:*:*:*:*:*", "matchCriteriaId": "0EFA822E-72CE-4EA6-A7FB-C4FCE94B670D", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v10:*:*:*:*:*:*:*", "matchCriteriaId": "5D7FA2C1-1F55-494A-ADAA-AC5215D211FB", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v60:*:*:*:*:*:*:*", "matchCriteriaId": "29973162-719D-47B0-858A-6EC2336967DC", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v80:*:*:*:*:*:*:*", "matchCriteriaId": "CA50D87E-701F-48CE-81D8-342BC3F19BDA", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v100:*:*:*:*:*:*:*", "matchCriteriaId": "29B1E9C2-8336-43BF-A0CC-262A1DC29735", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter."}, {"lang": "es", "value": "Vulnerabilidad de cadena de formato en el interfaz CLI de Watchguard Firebox Vclass 3.2 y anteriores, RSSA Appliance 3.0.2 permite a atacantes remotos causar una denegaci\u00f3n de servicio y posiblemente ejecutar c\u00f3digo arbitrario mediante especificadores de cadenas de formateo en el par\u00e1metro de contrase\u00f1a."}], "id": "CVE-2002-1519", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-04-02T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/10217.php"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/4924"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/5814"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/10217.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/4924"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/5814"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}