CVE-2000-1027
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a...
CVE-2000-1027 is a medium vulnerability (CVSS 5.0) in Cisco Pix Firewall Software, published December 11, 2000. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.54%, the 89th percentile. No source names a fixed version.
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
Exploit likelihood
What each source reports
NVD Score used
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
- Record
CVE-2000-1027- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
- Record
CVE-2000-1027- Updated
- 2026-11-02
EUVDEUVD-2000-1014 No score
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
- Record
EUVD-2000-1014- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmw8-4qxc-x5wf No score
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a...
Cisco Secure PIX Firewall 5.2(2) allows remote attackers to determine the real IP address of a target FTP server by flooding the server with PASV requests, which includes the real IP address in the response when passive mode is established.
- Record
GHSA-vmw8-4qxc-x5wf- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Cisco PIX Firewall 5.2 - PASV Mode FTP Internal Address Disclosure | 2000-10-03 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD |