Remote IP Address Exposure in Cisco Secure PIX Firewall

CVE-2000-1027

Summary

A flaw in Cisco Secure PIX Firewall version 5.2(2) allows remote attackers to expose the real IP address of an FTP server. By sending an excessive number of PASV requests, an attacker can extract the actual IP address from the FTP server's response during the establishment of the passive mode connection. This vulnerability raises significant security concerns, as it enables potential attackers to map the network structure and target specific elements within the organization.

References