Search
Find a vulnerability
Search criteria
8 vulnerabilities found for security_gateway by astaro
CVE-2012-3238 (GCVE-0-2012-3238)
Vulnerability from nvd – Published: 2012-07-09 22:00 – Updated: 2024-09-17 02:12
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://archives.neohapsis.com/archives/fulldisclo… | mailing-listx_refsource_FULLDISC |
| http://security.inshell.net/advisory/27 | x_refsource_MISC |
| http://www.astaro.com/en-uk/blog/up2date/8305 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T19:57:50.365Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://security.inshell.net/advisory/27"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the \"Comment (optional)\" field."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2012-07-09T22:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://security.inshell.net/advisory/27"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2012-3238",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the \"Comment (optional)\" field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"refsource": "FULLDISC",
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"name": "http://security.inshell.net/advisory/27",
"refsource": "MISC",
"url": "http://security.inshell.net/advisory/27"
},
{
"name": "http://www.astaro.com/en-uk/blog/up2date/8305",
"refsource": "CONFIRM",
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2012-3238",
"datePublished": "2012-07-09T22:00:00.000Z",
"dateReserved": "2012-06-06T00:00:00.000Z",
"dateUpdated": "2024-09-17T02:12:02.137Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-4243 (GCVE-0-2007-4243)
Vulnerability from nvd – Published: 2007-08-08 22:00 – Updated: 2024-08-07 14:46
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
14 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/2981 | third-party-advisoryx_refsource_SREASON |
| http://astaro.org/showthread.php?p=77667 | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/477120/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/archive/1/475642/100… | mailing-listx_refsource_BUGTRAQ |
| http://astaro.org/showthread.php?t=17782 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=18307 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=18551 | x_refsource_MISC |
| http://astaro.org/showthread.php?p=78258 | x_refsource_MISC |
| http://www.securitytracker.com/id?1018543 | vdb-entryx_refsource_SECTRACK |
| http://www.hescominsoon.com/archives/773 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=17930 | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://astaro.org/showthread.php?t=18280 | x_refsource_MISC |
| http://astaro.org/showthread.php?p=77694 | x_refsource_MISC |
Date Public
2007-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:46:39.564Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=77694"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=77694"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4243",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2981",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "http://astaro.org/showthread.php?p=77667",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "http://astaro.org/showthread.php?t=17782",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"name": "http://astaro.org/showthread.php?t=18307",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"name": "http://astaro.org/showthread.php?t=18551",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"name": "http://astaro.org/showthread.php?p=78258",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018543"
},
{
"name": "http://www.hescominsoon.com/archives/773",
"refsource": "MISC",
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "http://astaro.org/showthread.php?t=17930",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"name": "http://astaro.org/showthread.php?t=18280",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"name": "http://astaro.org/showthread.php?p=77694",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=77694"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4243",
"datePublished": "2007-08-08T22:00:00.000Z",
"dateReserved": "2007-08-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:46:39.564Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-4242 (GCVE-0-2007-4242)
Vulnerability from nvd – Published: 2007-08-08 22:00 – Updated: 2024-08-07 14:46
VLAI
EPSS
VEX
Summary
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/2981 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/477120/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/archive/1/475642/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securitytracker.com/id?1018543 | vdb-entryx_refsource_SECTRACK |
| http://www.hescominsoon.com/archives/773 | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:46:39.417Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4242",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2981",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018543"
},
{
"name": "http://www.hescominsoon.com/archives/773",
"refsource": "MISC",
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4242",
"datePublished": "2007-08-08T22:00:00.000Z",
"dateReserved": "2007-08-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:46:39.417Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-3253 (GCVE-0-2007-3253)
Vulnerability from nvd – Published: 2007-06-18 10:00 – Updated: 2024-08-07 14:14
VLAI
EPSS
VEX
Summary
Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://up2date.astaro.com/2007/06/up2date_7005_re… | x_refsource_CONFIRM |
| http://osvdb.org/37346 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/25694 | third-party-advisoryx_refsource_SECUNIA |
| http://osvdb.org/37345 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/24492 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2007/2220 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-06-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:14:11.473Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-06-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-3253",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html",
"refsource": "CONFIRM",
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"refsource": "OSVDB",
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"refsource": "OSVDB",
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-3253",
"datePublished": "2007-06-18T10:00:00.000Z",
"dateReserved": "2007-06-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:14:11.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2012-3238 (GCVE-0-2012-3238)
Vulnerability from cvelistv5 – Published: 2012-07-09 22:00 – Updated: 2024-09-17 02:12
VLAI
EPSS
VEX
Summary
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://archives.neohapsis.com/archives/fulldisclo… | mailing-listx_refsource_FULLDISC |
| http://security.inshell.net/advisory/27 | x_refsource_MISC |
| http://www.astaro.com/en-uk/blog/up2date/8305 | x_refsource_CONFIRM |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T19:57:50.365Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://security.inshell.net/advisory/27"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the \"Comment (optional)\" field."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2012-07-09T22:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://security.inshell.net/advisory/27"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2012-3238",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the \"Comment (optional)\" field."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20120610 [CVE-2012-3238] Astaro Security Gateway \u003c= v8.304 Persistent Cross-Site Scripting Vulnerability",
"refsource": "FULLDISC",
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html"
},
{
"name": "http://security.inshell.net/advisory/27",
"refsource": "MISC",
"url": "http://security.inshell.net/advisory/27"
},
{
"name": "http://www.astaro.com/en-uk/blog/up2date/8305",
"refsource": "CONFIRM",
"url": "http://www.astaro.com/en-uk/blog/up2date/8305"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2012-3238",
"datePublished": "2012-07-09T22:00:00.000Z",
"dateReserved": "2012-06-06T00:00:00.000Z",
"dateUpdated": "2024-09-17T02:12:02.137Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-4243 (GCVE-0-2007-4243)
Vulnerability from cvelistv5 – Published: 2007-08-08 22:00 – Updated: 2024-08-07 14:46
VLAI
EPSS
VEX
Summary
Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
14 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/2981 | third-party-advisoryx_refsource_SREASON |
| http://astaro.org/showthread.php?p=77667 | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/477120/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/archive/1/475642/100… | mailing-listx_refsource_BUGTRAQ |
| http://astaro.org/showthread.php?t=17782 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=18307 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=18551 | x_refsource_MISC |
| http://astaro.org/showthread.php?p=78258 | x_refsource_MISC |
| http://www.securitytracker.com/id?1018543 | vdb-entryx_refsource_SECTRACK |
| http://www.hescominsoon.com/archives/773 | x_refsource_MISC |
| http://astaro.org/showthread.php?t=17930 | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://astaro.org/showthread.php?t=18280 | x_refsource_MISC |
| http://astaro.org/showthread.php?p=77694 | x_refsource_MISC |
Date Public
2007-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:46:39.564Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://astaro.org/showthread.php?p=77694"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://astaro.org/showthread.php?p=77694"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4243",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway (ASG) 7 allows remote attackers to cause a denial of service (CPU consumption) via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2981",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "http://astaro.org/showthread.php?p=77667",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=77667"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "http://astaro.org/showthread.php?t=17782",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=17782"
},
{
"name": "http://astaro.org/showthread.php?t=18307",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18307"
},
{
"name": "http://astaro.org/showthread.php?t=18551",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18551"
},
{
"name": "http://astaro.org/showthread.php?p=78258",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=78258"
},
{
"name": "1018543",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018543"
},
{
"name": "http://www.hescominsoon.com/archives/773",
"refsource": "MISC",
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "http://astaro.org/showthread.php?t=17930",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=17930"
},
{
"name": "astaro-packetfilter-dos(35823)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35823"
},
{
"name": "http://astaro.org/showthread.php?t=18280",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?t=18280"
},
{
"name": "http://astaro.org/showthread.php?p=77694",
"refsource": "MISC",
"url": "http://astaro.org/showthread.php?p=77694"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4243",
"datePublished": "2007-08-08T22:00:00.000Z",
"dateReserved": "2007-08-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:46:39.564Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-4242 (GCVE-0-2007-4242)
Vulnerability from cvelistv5 – Published: 2007-08-08 22:00 – Updated: 2024-08-07 14:46
VLAI
EPSS
VEX
Summary
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://securityreason.com/securityalert/2981 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/477120/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/archive/1/475642/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.securitytracker.com/id?1018543 | vdb-entryx_refsource_SECTRACK |
| http://www.hescominsoon.com/archives/773 | x_refsource_MISC |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:46:39.417Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "2981",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id?1018543"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-4242",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "2981",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/2981"
},
{
"name": "20070819 Astaro DOS and POP3 bypass issues partially resolved",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/477120/100/0/threaded"
},
{
"name": "20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/475642/100/0/threaded"
},
{
"name": "1018543",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id?1018543"
},
{
"name": "http://www.hescominsoon.com/archives/773",
"refsource": "MISC",
"url": "http://www.hescominsoon.com/archives/773"
},
{
"name": "astaro-pop3-security-bypass(35827)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35827"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-4242",
"datePublished": "2007-08-08T22:00:00.000Z",
"dateReserved": "2007-08-08T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:46:39.417Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-3253 (GCVE-0-2007-3253)
Vulnerability from cvelistv5 – Published: 2007-06-18 10:00 – Updated: 2024-08-07 14:14
VLAI
EPSS
VEX
Summary
Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://up2date.astaro.com/2007/06/up2date_7005_re… | x_refsource_CONFIRM |
| http://osvdb.org/37346 | vdb-entryx_refsource_OSVDB |
| http://secunia.com/advisories/25694 | third-party-advisoryx_refsource_SECUNIA |
| http://osvdb.org/37345 | vdb-entryx_refsource_OSVDB |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/24492 | vdb-entryx_refsource_BID |
| http://www.vupen.com/english/advisories/2007/2220 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2007-06-15 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T14:14:11.473Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-06-15T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-07-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-3253",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via (1) certain email, which stops the SMTP Proxy during scanning; (2) certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing virus scanned web pages; and (3) a disconnection during a streaming session."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html",
"refsource": "CONFIRM",
"url": "http://up2date.astaro.com/2007/06/up2date_7005_released_middle.html"
},
{
"name": "37346",
"refsource": "OSVDB",
"url": "http://osvdb.org/37346"
},
{
"name": "25694",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/25694"
},
{
"name": "37345",
"refsource": "OSVDB",
"url": "http://osvdb.org/37345"
},
{
"name": "astaro-http-proxy-dos(34884)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34884"
},
{
"name": "24492",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/24492"
},
{
"name": "ADV-2007-2220",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/2220"
},
{
"name": "astaro-smtp-proxy-dos(34882)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34882"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-3253",
"datePublished": "2007-06-18T10:00:00.000Z",
"dateReserved": "2007-06-18T00:00:00.000Z",
"dateUpdated": "2024-08-07T14:14:11.473Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}