Known Vulnerabilities for products from Stonesoft

Listed below are 7 of the newest known vulnerabilities associated with the vendor "Stonesoft".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2009-2631 Multiple clientless SSL VPN products that run in web browsers, including Stonesoft StoneGate; Cisco ASA; SonicWALL E-Class SS... 6.8 - MEDIUM 2009-12-04 2018-10-10
CVE-2007-5793 Stonesoft StoneGate IPS before 4.0 does not properly decode Fullwidth/Halfwidth Unicode encoded data, which makes it easier f... 7.1 - HIGH 2007-11-01 2011-03-08
CVE-2005-3672 The Internet Key Exchange version 1 (IKEv1) implementation in Stonesoft StoneGate Firewall before 2.6.1 allows remote attacke... 5 - MEDIUM 2005-11-18 2011-03-08
CVE-2004-0498 The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service ... 5 - MEDIUM 2004-12-31 2008-09-05
CVE-2004-0112 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check... 5 - MEDIUM 2004-11-23 2021-11-08
CVE-2004-0081 OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial o... 5 - MEDIUM 2004-11-23 2021-11-08
CVE-2004-0079 The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a deni... 7.5 - HIGH 2004-11-23 2023-12-28