By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrary ports of a target host if an alternative conduit has already been allowed, which can cause administrators to configure less restrictive access controls than intended if they do not understand this functionality
Published Apr 21, 2005
No CVSS score
EPSS 1.88%
Description
Affected products
Remediation
References (3)
Change history (0)
No recorded changes yet.