PT-2002-1220 · Avirt · Avirt Gateway Suite

Published 2002-03-15 · Updated 2016-10-18 · CVE-2002-0134

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Avirt Gateway Suite version 4.2

Description The issue concerns the Telnet proxy in Avirt Gateway Suite, which does not require authentication for connecting to the proxy system. This allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Recommendations For Avirt Gateway Suite version 4.2, consider implementing authentication for the Telnet proxy to prevent unauthorized access. As a temporary workaround, restrict access to the Telnet proxy until a proper fix is applied.

Fix

Related Identifiers

CVE-2002-0134

Affected Products

Avirt Gateway Suite

References · 5

• http://iss.net/security_center/static/7915.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0134 · Security Note
• http://marc.info/?l=bugtraq&m=101131669102843&w=2 · Note
• http://marc.info/?l=bugtraq&m=101424723728817&w=2 · Note
• http://securityfocus.com/bid/3901 · Note