CVE-2004-2252

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-203

Description

The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks.

Affected products

Sophos Astaro Security Linux: before 4.024 — fixed in 4.024

How to fix

Upgrade to a fixed version: Sophos Astaro Security Linux 4.024. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/13089
http://securitytracker.com/id?1012065
http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459
http://www.osvdb.org/11407
https://exchange.xforce.ibmcloud.com/vulnerabilities/17960
http://secunia.com/advisories/13089
http://securitytracker.com/id?1012065
http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459
http://www.osvdb.org/11407
https://exchange.xforce.ibmcloud.com/vulnerabilities/17960

Get alerted when CVE-2004-2252 or the next vulnerability affects your stack