CVE-2008-1618
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.
El servicio PPTP VPN en Watchguard Firebox versiones anteriores a 10, al realizar la negociación de autenticación MS-CHAPv2, genera diferentes códigos de error dependiendo de si el nombre de usuario es válido o no válido, lo que permite a los atacantes remotos enumerar nombres de usuario comprobados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-04-02 CVE Reserved
- 2008-04-07 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- 2024-11-25 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://www.osvdb.org/44218 | Vdb Entry | |
| http://www.securityfocus.com/bid/28619 | Vdb Entry | |
| http://www.securitytracker.com/id?1019796 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/41683 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://www.mwrinfosecurity.com/publications/mwri_watchguard-firebox-pptp-vpn-user-enumeration-advisory_2008-04-04.pdf | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/29708 | 2017-08-08 | |
| http://www.vupen.com/english/advisories/2008/1152/references | 2017-08-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Watchguard Search vendor "Watchguard" | Firebox Pptp Vpn Search vendor "Watchguard" for product "Firebox Pptp Vpn" | 4.9 Search vendor "Watchguard" for product "Firebox Pptp Vpn" and version "4.9" | - |
Affected
| ||||||
| Watchguard Search vendor "Watchguard" | Firebox Pptp Vpn Search vendor "Watchguard" for product "Firebox Pptp Vpn" | 5.0 Search vendor "Watchguard" for product "Firebox Pptp Vpn" and version "5.0" | - |
Affected
| ||||||