PT-2004-3434 · Secure Computing · Sidewinder G2

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2543

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Secure Computing Corporation Sidewinder G2 version 6.1.0.01

Description The issue might allow remote attackers to cause a denial of service, specifically a proxy failure, through various means such as sending invalid traffic to the T.120 or RTSP proxy, or by sending invalid MIME messages to the mail filter. It is worth noting that the embedded monitoring sub-system has the capability to automatically restart after the failure occurs.

Recommendations For Secure Computing Corporation Sidewinder G2 version 6.1.0.01, as a temporary workaround, consider restricting access to the T.120 and RTSP proxy, as well as limiting the handling of MIME messages by the mail filter until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2004-2543

Affected Products

Sidewinder G2

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2004-2543 · Security Note
• http://secunia.com/advisories/11632 · Vendor Advisory
• http://osvdb.org/6232 · Note
• http://securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf · Note
• http://osvdb.org/6234 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16184 · Note
• http://osvdb.org/6233 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16186 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16183 · Note