Lucene search
HistoryAug 08, 2007 - 10:17 p.m.
CVE-2007-4242
cve-2007-4242
astaro security gateway
asg 7
pop3 proxy
virus scanning
remote attackers
bypass scanning
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.3%
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.
Affected configurations
Node
astarosecurity_gatewayMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| astaro:security_gateway | astaro security gateway | eq | 7.0 |
Related
nvd
nvd
CVE-2007-4242
2007-08-08 22:17:00
cvelist
cvelist
CVE-2007-4242
2007-08-08 22:00:00
prion
prion
Authentication flaw
2007-08-08 22:17:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
Low
0.113 Low
EPSS
Percentile
95.3%
Related for CVE-2007-4242