CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4243

Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway ASG 7 allows remote attackers to cause a denial of service CPU consumption via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data...

Authentication flaw

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4243

Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway ASG 7 allows remote attackers to cause a denial of service CPU consumption via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data...

CVE-2007-4242

CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...

CVE-2007-4243

CVE-2007-4243 affects Astaro Security Gateway (ASG) 7, via a flaw in pfilter-reporter.pl that can cause a denial of service by consuming CPU when handling certain network traffic. Public demonstrations referenced P2P and iTunes traffic consuming large data volumes. Multiple connected sources reaf...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

Multiple unspecified vulnerabilities in Astaro Security Gateway ASG before 7.005 allow remote attackers to cause a denial of service via 1 certain email, which stops the SMTP Proxy during scanning; 2 certain HTTP traffic, which stops or slows down the HTTP proxy during HTTP responses containing...

CVE-2007-3253

The CVE-2007-3253 entry relates to Astaro Security Gateway (ASG) prior to 7.005. The documented issues are three DoS vectors: (1) email path triggering the SMTP Proxy to stop during scanning, (2) HTTP traffic causing the HTTP proxy to stop or slow during responses that include virus-scanned pages...

CVE-2005-3985

The Internet Key Exchange version 1 IKEv1 implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of...

CVE-2005-3985

The Internet Key Exchange version 1 IKEv1 implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of...

CVE-2005-3985

The CVE-2005-3985 entry concerns the Internet Key Exchange v1 (IKEv1) implementation in Astaro Security Linux prior to 6.102, which can be triggered by crafted IKE packets to cause a denial of service and possibly arbitrary code execution; the advisory notes uncertainty about whether CVE-2005-366...

CVE-2005-3100

Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service...

CVE-2005-3100

Technical details about CVE-2005-3100 are not provided in the connected documents. Available sources mention a PPTP remote DoS vulnerability in Astaro Security Linux 4.027 but do not disclose affected components, versions, exploit details, or fixes. Monitor for updates.

CVE-2005-3100

Unspecified "PPTP Remote DoS Vulnerability" in Astaro Security Linux 4.027 allows attackers to cause a denial of service...

CVE-2005-2729

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services...

CVE-2005-2731

Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. dot dot in the wfedownload parameter to index.fpl...

CVE-2005-2729

The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to bypass firewall rules and connect to local services...

CVE-2005-2730

The CVE-2005-2730 entry concerns the HTTP proxy in Astaro Security Linux 6.0. The issue arises from handling an invalid request, which can cause the proxy to disclose a Proxy-Authorization string in an error message. This is a remote-attack scenario with potential exposure of credentials, as indi...