Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and attack vectors, aka "security vulnerabilities found by 3rd party analysis."

The version of Attachmate Reflection for Secure IT Windows server installed on the remote Windows host is less than 7.0 SP1 and thus is reportedly affected by multiple unspecified vulnerabilities.

The version of Attachmate Reflection for Secure IT UNIX Server installed on the remote host is lower than 7.0 SP1 and thus reportedly affected by several issues : 

  - There is an inherited vulnerability in OpenSSL when parsing malformed ASN.1 structures leading to a denial of service vulnerability (CVE-2006-2937).
  - There is an inherited vulnerability in OpenSSL when parsing parasitic public keys leading to a denial of service vulnerability (CVE-2006-2940).
  - There is an inherited vulnerability in OpenSSL when performing Montgomery multiplication, leading to a side-channel attack vulnerability (CVE-2007-3108).
  - There is an inherited vulnerability in OpenSSH with the execution of the ~/.ssh2/rc session file (CVE-2008-1657).
  - There is an issue with the security of forwarded X11 connections, leading to possible hijacking. (CVE-2008-1483)
  - There are multiple unspecified other vulnerabilities.

The version of Attachmate Reflection for Secure IT UNIX server installed on the remote host is less than 7.0 SP1 and thus reportedly affected by several issues :

  - There is an inherited vulnerability in OpenSSL when     parsing malformed ASN.1 structures leading to a     denial of service vulnerability (CVE-2006-2937).

  - There is an inherited vulnerability in OpenSSL when     parsing parasitic public keys leading to a     denial of service vulnerability (CVE-2006-2940).

  - There is an inherited vulnerability in OpenSSL when     performing Montgomery multiplication, leading to a     side-channel attack vulnerability (CVE-2007-3108).

  - There is an inherited vulnerability in OpenSSH with the     execution of the ~/.ssh2/rc session file     (CVE-2008-1657).

  - There is an issue with the security of forwarded X11     connections, leading to possible hijacking.
    (CVE-2008-1483)

  - There are multiple unspecified other vulnerabilities.
    (CVE-2008-6021)

ID	Name	Product	Family	Severity
55285	Attachmate Reflection for Secure IT Windows Server < 7.0 SP1 Multiple Unspecified Vulnerabilities	Nessus	Windows	critical
4632	Attachmate Reflection for Secure IT UNIX Server < 7.0 SP1 Multiple Vulnerabilities	Nessus Network Monitor	SSH	medium
33948	Attachmate Reflection for Secure IT UNIX server < 7.0 SP1 Multiple Vulnerabilities	Nessus	Misc.	critical

Detections

Analytics

CVE-2008-6021

critical

Tenable Plugins

critical

medium

critical