Detections
Analytics
Attachmate Reflection for Secure IT UNIX server < 7.0 SP1 Multiple Vulnerabilities
critical Nessus Plugin ID 33948
Language:
Synopsis
The remote SSH service is affected by multiple vulnerabilities.Description
The version of Attachmate Reflection for Secure IT UNIX server installed on the remote host is less than 7.0 SP1 and thus reportedly affected by several issues :- There is an inherited vulnerability in OpenSSL when parsing malformed ASN.1 structures leading to a denial of service vulnerability (CVE-2006-2937).
- There is an inherited vulnerability in OpenSSL when parsing parasitic public keys leading to a denial of service vulnerability (CVE-2006-2940).
- There is an inherited vulnerability in OpenSSL when performing Montgomery multiplication, leading to a side-channel attack vulnerability (CVE-2007-3108).
- There is an inherited vulnerability in OpenSSH with the execution of the ~/.ssh2/rc session file (CVE-2008-1657).
- There is an issue with the security of forwarded X11 connections, leading to possible hijacking.
(CVE-2008-1483)
- There are multiple unspecified other vulnerabilities.
(CVE-2008-6021)
Solution
Upgrade to Attachmate Reflection for Secure IT UNIX server 7.0 SP1.See Also
Plugin Details
Severity: Critical
ID: 33948
File Name: attachmate_reflection_70_sp1.nasl
Version: 1.22
Type: remote
Family: Misc.
Published: 8/20/2008
Updated: 12/22/2020
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.1
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:attachmate:reflection_for_secure_it
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 9/28/2006
Reference Information
CVE: CVE-2006-2937, CVE-2006-2940, CVE-2007-3108, CVE-2008-1483, CVE-2008-1657, CVE-2008-6021