PT-2004-3434 · Secure Computing · Sidewinder G2

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2543

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Secure Computing Corporation Sidewinder G2 version 6.1.0.01

Description The issue might allow remote attackers to cause a denial of service, specifically a proxy failure, through various means such as sending invalid traffic to the T.120 or RTSP proxy, or by sending invalid MIME messages to the mail filter. It is worth noting that the embedded monitoring sub-system has the capability to automatically restart after the failure occurs.

Recommendations For Secure Computing Corporation Sidewinder G2 version 6.1.0.01, as a temporary workaround, consider restricting access to the T.120 and RTSP proxy, as well as limiting the handling of MIME messages by the mail filter until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2004-2543

Produtos afetados

Sidewinder G2

Referências · 9

• http://osvdb.org/6232 · Nota
• http://securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf · Nota
• http://osvdb.org/6234 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16184 · Nota
• http://osvdb.org/6233 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2543 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16186 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16183 · Nota
• http://secunia.com/advisories/11632 · Aviso do Fabricante