PT-2007-1332 · Arkoon · Arkoon Fast360 Utm

Published 2007-02-24 · Updated 2017-07-29 · CVE-2006-7053

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Arkoon FAST360 UTM appliances versions 3.0 through 3.0/29 Arkoon FAST360 UTM appliances version 3.1 Arkoon FAST360 UTM appliances version 3.2 Arkoon FAST360 UTM appliances version 3.3

Description The issue allows remote attackers to bypass keyword filtering in the FAST HTTP module and signatures in the IDPS HTTP module via crafted URLs that are misinterpreted.

Recommendations For versions 3.0 through 3.0/29, consider restricting access to the FAST HTTP module until a fix is available. For version 3.1, restrict access to the IDPS HTTP module to minimize the risk of exploitation. For version 3.2, avoid using crafted URLs that could be misinterpreted by the FAST HTTP module. For version 3.3, disable the FAST HTTP module as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2006-7053

Affected Products

Arkoon Fast360 Utm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-7053 · Security Note
• http://secunia.com/advisories/20570 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27003 · Note
• http://vupen.com/english/advisories/2006/2216 · Note
• http://arkoon.fr/upload/alertes/32AK-2006-01-EN-1.0_EVASION_HTTP.pdf · Note