42 matches found
Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write
Summary The SG gateway appliance range provides Internet security and privacy of communications for small and medium enterprises, and branch offices. It simply and securely connects your office to the Internet, and with its robust stateful firewall, shields your computers from external threats...
SnapGear packets flood DoS
No description provided...
Design/Logic Flaw
SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service complete packet loss via a packet flood, a different vulnerability than CVE-2006-4613...
CVE-2007-1324
SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service complete packet loss via a packet flood, a different vulnerability than CVE-2006-4613...
CVE-2007-1324
SnapGear appliances before firmware 3.1.4u5 are affected by CVE-2007-1324, enabling remote denial of service via a packet flood. The issue aligns with CVE-2006-4613 family behavior describing multiple vulnerabilities causing DoS through (1) IPSec replay window handling and (2) vulnerable ClamAV v...
CVE-2007-1324
SnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote attackers to cause a denial of service complete packet loss via a packet flood, a different vulnerability than CVE-2006-4613...
PT-2007-2730 · Snapgear · Snapgear
Name of the Vulnerable Software and Affected Versions: SnapGear appliances versions prior to 3.1.4u5 Description: The issue allows remote attackers to cause a denial of service, resulting in complete packet loss, via a packet flood. Recommendations: For versions prior to 3.1.4u5, update to firmwa...
CVE-2006-4613
Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...
PT-2006-5399 · Clamav +1 · Clamav +1
Name of the Vulnerable Software and Affected Versions: SnapGear versions prior to 3.1.4u1 ClamAV versions prior to 0.88.4 Description: The issue involves multiple unspecified vulnerabilities that can be exploited by remote attackers to cause a denial of service. This is achieved through unspecifi...
CVE-2006-4613
Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving 1 IPSec replay windows and 2 the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018...
CVE-2006-4613
CVE-2006-4613 affects SnapGear before 3.1.4u1, with denial-of-service via IPSec replay window and via vulnerable ClamAV before 0.88.4; the latter (CVE-2006-4018) is a UPX-handling heap overflow in ClamAV that can crash the scanner or allow remote code execution. Some sources note vector 2 may be ...
CVE-2002-0603
Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...
CVE-2002-0604
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...
CVE-2002-0602
Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...
CVE-2002-0603
Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service IPSEC crash via a zero length packet to UDP port 500...
CVE-2002-0604
Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service crash via a large number of packets with malformed IP options...
CVE-2002-0602
Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service crash via a large number of connections to 1 the HTTP web management port, or 2 the PPTP port...
CVE-2002-0604
CVE-2002-0604 affects Snapgear Lite+ firewall versions 1.5.3 and 1.5.4. A remote attacker can crash the device (DoS) by sending a large number of packets with malformed IP options. Attack vector: NETWORK; authentication: NONE; impact: availability partial. No remediation/fix details are provided ...
CVE-2002-0603
The CVE-2002-0603 entry concerns the Snapgear Lite+ firewall, version 1.5.3. Affected component: the IPsec handling vulnerable to a remote denial-of-service triggered by sending a zero-length packet to UDP port 500, causing a crash. The vulnerability is network-exploitable with no authentication ...
CVE-2002-0602
Affected product: Snapgear Lite+ firewall, versions 1.5.3 and 1.5.4. Issue: remote attackers can cause a denial of service (crash) by establishing a large number of connections to the HTTP web management port or the PPTP port. Root cause is not explicitly detailed in the provided documents. Impac...