PT-2004-3435 · Secure Computing · Sidewinder G2

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2544

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Secure Computing Corporation Sidewinder G2 version 6.1.0.01

Description The issue allows attackers to obtain sensitive information by exporting private keys when exporting firewall certificates from the Admin Console.

Recommendations For Secure Computing Corporation Sidewinder G2 version 6.1.0.01, avoid exporting firewall certificates from the Admin Console until a fix is available. As a temporary workaround, consider restricting access to the certificate export feature to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-2544

Affected Products

Sidewinder G2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-2544 · Security Note
• http://osvdb.org/6235 · Patch
• http://securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24364 · Note