The version of the DeleGate proxy server has a remote buffer overflow vulnerability.  This issue can be triggered by issuing the following command :

  whois://a b 1 AAAA..AAAAA

A remote attacker could exploit this issue to cause a denial of or execute arbitrary code.

There are reportedly hundreds of other remote buffer overflow vulnerabilities in this version of DeleGate, though Nessus has not checked for those issues

It is possible to make the remote Axent raptor freeze by sending it a IP packet containing special options (of length equals to 0)

An attacker may use this flaw to make the remote firewall crash continuously, thus preventing the network from working properly.

It was possible to crash either the remote host or the firewall in between us and the remote host by sending an UDP packet going to port 0.

This flaw may allow an attacker to shut down your network.

The remote host has the three TCP ports 256, 257, and 258 open. It's very likely that this host is a Check Point FireWall/1.
A remote attacker could use this information to mount further attacks.

The remote web proxy accepts unauthenticated HTTP requests from the Nessus scanner.  By routing requests through the affected proxy, a user may be able to gain some degree of anonymity while browsing websites, which will see requests as originating from the remote host itself rather than the user's host.

The proxy allows the users to perform POST requests such as

	POST http://cvs.nessus.org:21

without any Content-length tag.

This request may give an attacker the ability to have an interactive session.

This problem may allow attackers to go through your firewall, by connecting to sensitive ports like 23 (telnet) using your proxy, or it can allow internal users to bypass the firewall rules and connect to ports they should not be allowed to.

In addition to that, your proxy may be used to perform attacks against other networks.

The remote proxy, allows everyone to perform requests against arbitrary ports, such as :

'GET http://cvs.nessus.org:110'. 

This problem may allow attackers to go through your firewall, by connecting to sensitive ports like 25 (sendmail) using the proxy. In addition to that, it might be used to perform attacks against other networks.

The proxy allows users to perform CONNECT requests such as :

	CONNECT http://cvs.example.org:23 

This request gives the person who made it the ability to have an interactive session with a third-party site. 

This issue may allow attackers to bypass your firewall by connecting to sensitive ports such as 23 (telnet) via the proxy, or it may allow internal users to bypass the firewall rules and connect to ports or sites they should not be allowed to. 

In addition, your proxy may be used to perform attacks against other networks.

ID	Name	Severity
10054	DeleGate Multiple Function Remote Overflows	critical
10022	Axent Raptor Firewall Zero Length IP Remote DoS	high
10074	Check Point FireWall-1 UDP Port 0 DoS	high
10044	Check Point FireWall-1 Identification	medium
10195	HTTP Proxy Open Relay Detection	info
10194	HTTP Proxy POST Request Relaying	medium
10193	HTTP Proxy Arbitrary Site/Port Relaying	medium
10192	HTTP Proxy CONNECT Request Relaying	info

Detections

Analytics

Firewalls Family for Nessus

critical

high

high

medium

info

medium

medium

info