FTP Authentication Flaw in Watchguard Soho Firewall

CVE-2002-1047

Summary

The FTP service in Watchguard Soho Firewall version 5.0.35a contains a vulnerability that allows remote attackers to exploit the authentication process. An attacker can gain unauthorized access by supplying a valid password with an incorrect username, potentially leading to privilege escalation and unauthorized actions on the affected system. This flaw exposes the firewall to exploitation, underscoring the importance of implementing strict access controls and proper authentication mechanisms.

References