CVE-2004-0163 Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session....
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sygate technologies secure enterprise | <= 3.5mr3 | No fix listed |
References
- 20040810 Corsaire Security Advisory - Sygate Secure Enterprise replay issue mailing-list
- www.corsaire.com patch vendor-advisory
- sse-replay-dos(16945) vdb-entry