Unscored CVE-2004-0163 EUVD-2004-0163GHSA-x6p8-m67w-rpfj

Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a de…

Published Aug 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.

References

sse-replay-dos(16945) vdb-entry
20040810 Corsaire Security Advisory - Sygate Secure Enterprise replay issue mailing-list
http://www.corsaire.com/advisories/c031120-002.txt