37 matches found
CVE-2005-2730
The CVE-2005-2730 entry concerns the HTTP proxy in Astaro Security Linux 6.0. The issue arises from handling an invalid request, which can cause the proxy to disclose a Proxy-Authorization string in an error message. This is a remote-attack scenario with potential exposure of credentials, as indi...
CVE-2005-2731
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. dot dot in the wfedownload parameter to index.fpl...
CVE-2005-2729
The CVE-2005-2729 entry describes a vulnerability in the HTTP proxy of Astaro Security Linux 6.0 where HTTP CONNECT requests to localhost are not properly filtered, allowing remote attackers to bypass firewall rules and access local services. The issue is a network‑level exposure with low attack ...
CVE-2005-2730
The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a Proxy-authorization string in an error message...
CVE-2005-2731
CVE-2005-2731: Directory traversal in Astaro Security Linux 6.0 when Webmin is used. Remote authenticated Webmin users could read arbitrary files via a .. sequence in the wfe_download parameter to index.fpl. NVD lists a LOW base score (2.1). No remediation details are provided in the supplied doc...
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attack...
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access
source: https://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker can bypass acce...
CVE-2004-2251
The CVE describes the PPTP server in Astaro Security Linux before 4.024 disclosing its version, enabling attackers to tailor attacks against the system. The underlying issue is information disclosure via banner/version reporting rather than an explicit code flaw in core PPTP functionality. The av...
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...
CVE-2004-2252
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...
CVE-2004-2252
The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...
CVE-2002-1737
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files...
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...
CVE-2004-2252
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...
PT-2004-3147 · Astaro · Astaro Security Linux
Name of the Vulnerable Software and Affected Versions: Astaro Security Linux versions prior to 4.024 Description: The issue allows remote attackers to obtain information about the system and construct specialized attacks by sending responses to SYN-FIN packets. Recommendations: For versions prior...