Description
The pop3 Proxy in Astaro Security Gateway (ASG) 7 does not perform virus scanning of attachments that exceed the maximum attachment size, and passes these attachments, which allows remote attackers to bypass this scanning via a large attachment.
References
- 2981 third-party-advisory
- 20070819 Astaro DOS and POP3 bypass issues partially resolved mailing-list
- 20070805 DOS issue in Astaro Version 7 packet filter reporting, POSSIBLE security issue in POP3 proxy mailing-list
- 1018543 vdb-entry
- http://www.hescominsoon.com/archives/773
- astaro-pop3-security-bypass(35827) vdb-entry