Astaro Security Gateway Detection

Astaro Security Gateway, a suite of network / mail / web security tools, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58107; scriptversion"1.6"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"Astaro Security Gateway Detection";...

Astaro Security Gateway Whitelist Bypass

Advisory Information Title: Astaro Security Gateway - bypass using whitelist domain pattern weakness upSploit Ref: UPS-2011-0041 Advisory Summary Astaro Security Gateway's default Web Filtering Exceptions allow specially-named domains to bypass security features of the firewall. Vendor Astaro...

Astaro Security Gateway 8.1 Cross Site Scripting

Title: ====== Astaro Security Gateway v8.1 - Input Validation Vulnerability Date: ===== 2011-12-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=193 VL-ID: ===== 193 Introduction: ============= Das Astaro Security Gateway 8.101 wurde speziell für den Schutz großer...

Astaro Gateway v8.1 - Input Validation Vulnerability

Document Title: =============== Astaro Gateway v8.1 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=193 Release Date: ============= 2011-12-26 Vulnerability Laboratory ID VL-ID: ==================================== 193...

Astaro Gateway v8.1 - Input Validation Vulnerability

Document Title: =============== Astaro Gateway v8.1 - Input Validation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=193 Release Date: ============= 2011-12-26 Vulnerability Laboratory ID VL-ID: ==================================== 193...

Astaro Security Linux v5 (XSS) Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ================================================================= Astaro Security Linux v5 XSS Cross Site Scripting Vulnerability ================================================================= Program : Astaro Security Linux v5 PoC : XSS...

Astaro Security Linux 5 Cross Site Scripting

Program : Astaro Security Linux v5 PoC : XSS Homepage : http://www.astaro.com/ Found by : Vincent Hautot Contact : v.hautot sysdream com //----- Application description Astaro Security Linux is a complete network security solution that protects organizations against a wide range of threats to...

Astaro Security Linux 5 - index.fpl Cross-Site Scripting

Astaro Security Linux 5 - index.fpl Cross-Site Scripting source: https://www.securityfocus.com/bid/38893/info Astaro Security Linux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Astaro Security Linux 5 - 'index.fpl' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38893/info Astaro Security Linux is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Spoofing Vulnerability

Description Multiple vendors' implementations of the DNS protocol are prone to a DNS-spoofing vulnerability because the software fails to securely implement random values when performing DNS queries. Successfully exploiting this issue allows remote attackers to spoof DNS replies, allowing them to...

SecurityReporter < 4.6.3p1 Multiple Vulnerabilities

The 'file.cgi' script included with the version of SecurityReporter installed on the remote host fails to sanitize input to the 'name' parameter before returning the contents of the specified file and supports bypassing authentication using specially crafted arguments. An unauthenticated, remote...

Authentication flaw

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4243

Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway ASG 7 allows remote attackers to cause a denial of service CPU consumption via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data...

CVE-2007-4242

The pop3 Proxy in Astaro Security Gateway ASG 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment...

CVE-2007-4242

CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...

CVE-2007-4243

Unspecified vulnerability in pfilter-reporter.pl in Astaro Security Gateway ASG 7 allows remote attackers to cause a denial of service CPU consumption via certain network traffic, as demonstrated by P2P and iTunes applications that download large amounts of data...

CVE-2007-4243

CVE-2007-4243 affects Astaro Security Gateway (ASG) 7, via a flaw in pfilter-reporter.pl that can cause a denial of service by consuming CPU when handling certain network traffic. Public demonstrations referenced P2P and iTunes traffic consuming large data volumes. Multiple connected sources reaf...

Astaro firewall DoS

Large amount of traffic with different connections causes CPU exhaustion...

DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy

I have details about the DOS issue on my blog with links to the Astaro forums. http://www.hescominsoon.com/archives/773 Version affected: ALL Version 7 systems. This is easily reproducible. Just setup a BT client behind the astaro and do not setup a packetfilter and NAT rule for the BT traffic...