A remote overflow exists in Avirt Gateway, Avirt Gateway Suite and Avirt SOHO. The HTTP proxy fails to check bounds of header fields in HTTP GET requests, resulting in a buffer overflow. With a specially crafted request, an attacker can cause a denial of service or execute arbitrary code, resulting in a loss of integrity and/or availability.
Classification
Location:
Remote/Network Access Required
Attack Type:
Denial of Service,
Input Manipulation
Impact:
Loss of Integrity,
Loss of Availability
Exploit:
Exploit Unknown
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.