Astaro Security Gateway Whitelist Domain Pattern Security Bypass Weakness

Bugtraq ID:	51969
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 10 2012 12:00AM
Updated:	Feb 10 2012 12:00AM
Credit:	Timeless Prototype
Vulnerable:	Astaro Security Gateway 0
Not Vulnerable:

Astaro Security Gateway Whitelist Domain Pattern Security Bypass Weakness

Astaro Security Gateway is prone to a security-bypass weakness.

Attackers can exploit this issue to bypass intended security restrictions of the firewall. This may aid in further attacks.

Astaro Security Gateway Whitelist Domain Pattern Security Bypass Weakness

Attackers can use readily available tools to exploit this issue.

Astaro Security Gateway Whitelist Domain Pattern Security Bypass Weakness

Solution:
Reports indicate that this issue has been fixed by the vendor but Symantec has not confirmed it. Please contact the vendor for more information.

Astaro Security Gateway Whitelist Domain Pattern Security Bypass Weakness

References:

• Astaro Security Gateway - bypass using whitelist domain pattern weakness (Timeless Prototype)
  
• Astaro Security Gateway Homepage (Astaro)