CVE-2000-1027

Medium

Published: 11/12/2000(UTC)Updated: 23/09/2026(UTC)Translated: 23/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.54%

89th percentile - higher than 89% of all known CVEs

Summary

A vulnerability in Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests. The response includes the real IP address when passive mode is established.

Risk Assessment

Disclosure of the real IP address of an FTP server may allow an attacker to bypass network protections and conduct further attacks. The risk affects organizations relying on PIX Firewall to hide internal IP addresses.

Recommendation

Update the Cisco Secure PIX Firewall firmware to a version that does not disclose the real IP address in PASV responses. Consider implementing additional protections against IP address leakage.

Other vulnerabilities in Cisco Secure PIX Firewall

CVE-2000-0613Medium
The Cisco Secure PIX Firewall does not properly identify forged TCP Reset (RST) packets, allowing remote attackers to force the closure of legitimate connections.

Original NVD description (English source)

Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS