Retired: SnapGear Multiple Unspecified Denial of Service Vulnerabilities

Bugtraq ID:	19805
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 01 2006 12:00AM
Updated:	Oct 31 2006 06:57PM
Credit:	Reportedly, this issue was disclosed by the vendor; this has not been confirmed.
Vulnerable:	Securecomputing SnapGear SG565 0
Not Vulnerable:	Securecomputing SnapGear 3.1.4 u2

Retired: SnapGear Multiple Unspecified Denial of Service Vulnerabilities

SnapGear is prone to multiple unspecified remote denial-of-service vulnerabilities.

An attacker can exploit these vulnerabilities to crash an affected device, effectively denying service to legitimate users.

These issues affect SnapGear firmware versions prior to 3.1.4u2.

This BID is being retired.

Retired: SnapGear Multiple Unspecified Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Retired: SnapGear Multiple Unspecified Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Reportedly, the vendor has released firmware version 3.1.4u1 to address these issues, but this has not been confirmed.

It has been confirmed that the vendor has released version 3.1.4u2. This update addresses these vulnerabilities. Please see the vendor references for additional information.


Securecomputing SnapGear SG565 0

• Secure Computing Secure Computing SnapGear 3.1.4u2
  http://www.cyberguard.info/snapgear/releases.html

Retired: SnapGear Multiple Unspecified Denial of Service Vulnerabilities

References:

• Secure Computing Homepage (Secure Computing Corporation)
  
• SnapGear Firmware Release Notes (Secure Computing)
  
• SnapGear Security Update Fixes Multiple OpenSSL and ClamAV Vulnerabilities (FrSIRT)