CVE-2000-0116
HighExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
Firewall-1 does not properly filter script tags, allowing remote attackers to bypass the 'Strip Script Tags' restriction by including an extra < in front of the SCRIPT tag.
Risk Assessment
Attackers can inject malicious scripts, potentially leading to serious security breaches and data leaks.
Recommendation
It is recommended to update Firewall-1 to the latest version and implement additional filtering mechanisms to prevent script injection.
Other vulnerabilities in Firewall-1
See all- CVE-1999-0895High
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
- CVE-1999-0770Low
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Original NVD description (English source)
Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the "Strip Script Tags" restriction by including an extra < in front of the SCRIPT tag.