PT-2004-3436 · Secure Computing · Sidewinder G2

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2545

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Secure Computing Corporation Sidewinder G2 version 6.1.0.01

Description The issue allows remote attackers to cause a denial of service, specifically an SMTP proxy failure, potentially due to an "extremely busy network". It is worth noting that the embedded monitoring sub-system has the capability to automatically restart after the failure.

Recommendations For version 6.1.0.01, consider implementing network traffic management to prevent the system from becoming extremely busy, which may help mitigate the risk of SMTP proxy failure. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2004-2545

Affected Products

Sidewinder G2

References · 4

• http://osvdb.org/6236 · Patch
• http://secunia.com/advisories/11632 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2545 · Security Note
• http://securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf · Patch