CVE-2002-1520 - Vulnerability Details - OpenCVE

The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Rapidstream	Rapidstream
Watchguard	Firebox

Configuration 1 [-]

OR	cpe:2.3:h:rapidstream:rapidstream:500:::::::*
	cpe:2.3:h:rapidstream:rapidstream:2000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:4000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:6000:::::::*
	cpe:2.3:h:rapidstream:rapidstream:8000:::::::*
	cpe:2.3:h:watchguard:firebox:v10:::::::*
	cpe:2.3:h:watchguard:firebox:v60:::::::*
	cpe:2.3:h:watchguard:firebox:v80:::::::*
	cpe:2.3:h:watchguard:firebox:v100:::::::*

No data.

References

Link	Providers
http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html
http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html
http://www.iss.net/security_center/static/10218.php
http://www.osvdb.org/4831
http://www.securityfocus.com/bid/5815

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-01T04:00:00

Updated: 2024-08-08T03:26:28.664Z

Reserved: 2003-02-23T00:00:00

Link: CVE-2002-1520

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2003-04-02T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2002-1520

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2002-09-27T00:00:00", "descriptions": [{"lang": "en", "value": "The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2004-08-20T00:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20020926 Watchguard firewall appliances security issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "4831", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/4831"}, {"name": "firebox-vclass-cli-admin-privileges(10218)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "http://www.iss.net/security_center/static/10218.php"}, {"name": "5815", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/5815"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2002-1520", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20020926 Watchguard firewall appliances security issues", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "refsource": "BUGTRAQ", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "4831", "refsource": "OSVDB", "url": "http://www.osvdb.org/4831"}, {"name": "firebox-vclass-cli-admin-privileges(10218)", "refsource": "XF", "url": "http://www.iss.net/security_center/static/10218.php"}, {"name": "5815", "refsource": "BID", "url": "http://www.securityfocus.com/bid/5815"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T03:26:28.664Z"}, "title": "CVE Program Container", "references": [{"name": "20020926 Watchguard firewall appliances security issues", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"name": "20020927 Software Update Available for Legacy RapidStream Appliances and WatchGuard Firebox Vclass appliances", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"name": "4831", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/4831"}, {"name": "firebox-vclass-cli-admin-privileges(10218)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "http://www.iss.net/security_center/static/10218.php"}, {"name": "5815", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/5815"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2002-1520", "datePublished": "2004-09-01T04:00:00", "dateReserved": "2003-02-23T00:00:00", "dateUpdated": "2024-08-08T03:26:28.664Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:rapidstream:rapidstream:500:*:*:*:*:*:*:*", "matchCriteriaId": "1BEFE717-99B9-4BA1-B221-B35C3B43CDB6", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:2000:*:*:*:*:*:*:*", "matchCriteriaId": "C13F6038-2FB7-4814-A058-D6192963474E", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:4000:*:*:*:*:*:*:*", "matchCriteriaId": "03CD6CE7-23B7-4A45-82C0-A5F10AD9CC55", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:6000:*:*:*:*:*:*:*", "matchCriteriaId": "653929D6-6E9F-470F-B3DB-95F5E14D2AC0", "vulnerable": true}, {"criteria": "cpe:2.3:h:rapidstream:rapidstream:8000:*:*:*:*:*:*:*", "matchCriteriaId": "0EFA822E-72CE-4EA6-A7FB-C4FCE94B670D", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v10:*:*:*:*:*:*:*", "matchCriteriaId": "5D7FA2C1-1F55-494A-ADAA-AC5215D211FB", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v60:*:*:*:*:*:*:*", "matchCriteriaId": "29973162-719D-47B0-858A-6EC2336967DC", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v80:*:*:*:*:*:*:*", "matchCriteriaId": "CA50D87E-701F-48CE-81D8-342BC3F19BDA", "vulnerable": true}, {"criteria": "cpe:2.3:h:watchguard:firebox:v100:*:*:*:*:*:*:*", "matchCriteriaId": "29B1E9C2-8336-43BF-A0CC-262A1DC29735", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges."}, {"lang": "es", "value": "El interfaz CLI de WatchGuard Firebox Vclass 3.2 y anteriores, y RSSA Appliance 3.0.2 no cierra adecuadamente la conexi\u00f3n SSH cuando se provee una opci\u00f3n -N durante autenticaci\u00f3n, lo que permite a atacantes remotos acceder a CLI con privilegios de administrador"}], "id": "CVE-2002-1520", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-04-02T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"source": "cve@mitre.org", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/10218.php"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/4831"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/5815"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.iss.net/security_center/static/10218.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/4831"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/5815"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}