CVE-2007-4242 The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| astaro security gateway | = 7.0 | No fix listed |
References
- 2981 third-party-advisory
- www.hescominsoon.com
- 20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy mailing-list
- 20070819 Astaro DOS and POP3 bypass issues partially resolved mailing-list
- 1018543 vdb-entry
- astaro-pop3-security-bypass(35827) vdb-entry