The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with the block durations implemented by sshguard, which might make it easier for attackers to bypass intended access restrictions.

According to its self-reported version number, the remote pfSense install is a version prior to 2.4.4-p3. It is, therefore, affected by multiple vulnerabilities, including the following:

  - In pfSense 2.4.4_1, blocking of source IP addresses on the basis of failed HTTPS authentication is     inconsistent with blocking of source IP addresses on the basis of failed SSH authentication (the behavior     does not match the sshguard documentation), which might make it easier for attackers to bypass intended     access restrictions. (CVE-2018-20799)

  - The expiretable configuration in pfSense 2.4.4_1 establishes block durations that are incompatible with     the block durations implemented by sshguard, which might make it easier for attackers to bypass intended     access restrictions. (CVE-2018-20798)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2018-20798

high

Tenable Plugins

high