Technical Description

A vulnerability has been identified in Blue Coat Security Gateway. This flaw is due to an error in OpenSSL, which could be exploited by attackers to forge signatures without the need of the secret key. For additional information, see : VUPEN/ADV-2006-3453

Affected Products

Blue Coat Security Gateway OS (SGOS) versions 2.x
Blue Coat Security Gateway OS (SGOS) versions 3.x
Blue Coat Security Gateway OS (SGOS) versions 4.x
Blue Coat Security Gateway OS (SGOS) versions 5.x

Solution

Upgrade to Blue Coat SG 3.2.7.8 PR, SG 4.1.4.12 PR, SG 4.2.2.10 PR, or SG 5.1.3.x :
http://www.bluecoat.com/support/downloads.html

References

http://www.vupen.com/english/advisories/2006/4206
http://www.bluecoat.com/support/knowledge/openSSL_RSA_Signature_forgery.html

ChangeLog

2006-10-26 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.