PT-2007-1332 · Arkoon · Arkoon Fast360 Utm

Publicado 2007-02-24 · Atualizado 2017-07-29 · CVE-2006-7053

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Arkoon FAST360 UTM appliances versions 3.0 through 3.0/29 Arkoon FAST360 UTM appliances version 3.1 Arkoon FAST360 UTM appliances version 3.2 Arkoon FAST360 UTM appliances version 3.3

Description The issue allows remote attackers to bypass keyword filtering in the FAST HTTP module and signatures in the IDPS HTTP module via crafted URLs that are misinterpreted.

Recommendations For versions 3.0 through 3.0/29, consider restricting access to the FAST HTTP module until a fix is available. For version 3.1, restrict access to the IDPS HTTP module to minimize the risk of exploitation. For version 3.2, avoid using crafted URLs that could be misinterpreted by the FAST HTTP module. For version 3.3, disable the FAST HTTP module as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2006-7053

Produtos afetados

Arkoon Fast360 Utm

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-7053 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27003 · Nota
• http://vupen.com/english/advisories/2006/2216 · Nota
• http://arkoon.fr/upload/alertes/32AK-2006-01-EN-1.0_EVASION_HTTP.pdf · Nota
• http://secunia.com/advisories/20570 · Aviso do Fabricante