PT-2007-5436 · Astaro · Astaro Security Gateway

William Warren · Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4243

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Astaro Security Gateway (ASG) version 7

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, through certain network traffic. This can be triggered by applications such as P2P and iTunes that download large amounts of data.

Recommendations For Astaro Security Gateway (ASG) version 7, consider restricting network traffic from applications that download large amounts of data as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-4243

Affected Products

Astaro Security Gateway

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2007-4243 · Security Note
• http://astaro.org/showthread.php?t=18551 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35823 · Note
• http://astaro.org/showthread.php?t=17930 · Note
• http://astaro.org/showthread.php?p=78258 · Note
• http://securityfocus.com/archive/1/475642/100/0/threaded · Note
• http://astaro.org/showthread.php?p=77667 · Note
• http://securityreason.com/securityalert/2981 · Note
• http://astaro.org/showthread.php?t=18280 · Note
• http://hescominsoon.com/archives/773 · Note
• http://astaro.org/showthread.php?p=77694 · Note
• http://astaro.org/showthread.php?t=17782 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4243 · Note
• http://securityfocus.com/archive/1/477120/100/0/threaded · Note
• http://securitytracker.com/id?1018543 · Note