Unspecified vulnerability in Arkoon FAST360 UTM appliances 3.0 through 3.0/29, 3.1, 3.2, and 3.3 allows remote attackers to bypass keyword filtering in the FAST HTTP module, and signatures in the IDPS HTTP module, via crafted URLs that are misinterpreted.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fast360 | Arkoon | * | 3.0_29 (including) |
| Fast360 | Arkoon | 3.0 (including) | 3.0 (including) |
| Fast360 | Arkoon | 3.1 (including) | 3.1 (including) |
| Fast360 | Arkoon | 3.2 (including) | 3.2 (including) |
| Fast360 | Arkoon | 3.3 (including) | 3.3 (including) |
References
- http://secunia.com/advisories/20570
- http://www.arkoon.fr/upload/alertes/32AK-2006-01-EN-1.0_EVASION_HTTP.pdf
- http://www.vupen.com/english/advisories/2006/2216
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27003
- http://secunia.com/advisories/20570
- http://www.arkoon.fr/upload/alertes/32AK-2006-01-EN-1.0_EVASION_HTTP.pdf
- http://www.vupen.com/english/advisories/2006/2216
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27003