95 matches found
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...
Astaro security Linux default configuration multiple vulnerabilities
It's possible to access 127.0.0.1 with CONNECT proxy, Webmin directory traversal, crossite scripting...
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attack...
Astaro Security Linux 6.0 01 - HTTP CONNECT Unauthorized Access
source: https://www.securityfocus.com/bid/14665/info Astaro Security Linux is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker can bypass acce...
CVE-2004-2252
The CVE-2004-2252 vulnerability affects Astaro Security Linux firewall prior to 4.024. The issue arises because the firewall sends responses to SYN-FIN packets, enabling remote attackers to glean system information and craft targeted attacks. Affected products: Astaro Security Linux versions befo...
CVE-2004-2252
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...
CVE-2004-2251
The CVE describes the PPTP server in Astaro Security Linux before 4.024 disclosing its version, enabling attackers to tailor attacks against the system. The underlying issue is information disclosure via banner/version reporting rather than an explicit code flaw in core PPTP functionality. The av...
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...
CVE-2002-1737
CVE-2002-1737 affects Astaro Security Linux 2.016, where a flaw allows local users to overwrite arbitrary files due to creation of world-writable files and directories. The root cause is insufficient permission controls on created files/dirs, enabling local escalation. Impact is local confidentia...
CVE-2002-1737
Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files...
CVE-2004-2252
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks...
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks...
PT-2004-3147 · Astaro · Astaro Security Linux
Name of the Vulnerable Software and Affected Versions: Astaro Security Linux versions prior to 4.024 Description: The issue allows remote attackers to obtain information about the system and construct specialized attacks by sending responses to SYN-FIN packets. Recommendations: For versions prior...