PT-2006-1640 · Blue Coat · Blue Coat Proxy Security Gateway Os

Published 2006-02-08 · Updated 2024-02-14 · CVE-2006-0578

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Blue Coat Proxy Security Gateway OS (SGOS) version 4.1.2.1

Description The issue allows remote attackers to bypass connection filters due to the lack of enforcement of CONNECT rules when using Deep Content Inspection.

Recommendations For version 4.1.2.1, consider disabling Deep Content Inspection until a patch is available to enforce CONNECT rules properly.

Fix

Related Identifiers

CVE-2006-0578

Affected Products

Blue Coat Proxy Security Gateway Os

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-0578 · Security Note
• http://secunia.com/advisories/18622 · Vendor Advisory
• http://secumind.net/content/french/modules/news/article.php?storyid=8 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24446 · Note
• http://osvdb.org/22853 · Note
• http://securitytracker.com/id?1015644 · Note
• http://bluecoat.com/support/knowledge/advisory_connect_denial_ignore.html · Note
• http://vupen.com/english/advisories/2006/0401 · Note