Some vulnerabilities have been reported in Ingate Firewall and SIParator, which can be exploited by malicious users to disclose potentially sensitive information or by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system.

1) The product uses a vulnerable version of the OpenSSL library.

For more information:
SA22130

2) The download of support reports is not properly restricted and may be exploited to gain knowledge of certain sensitive information.

3) An unspecified error exists within the authentication requirement for SIP. This can be exploited to bypass the authentication requirement by using a "maddr" parameter.

Solution
Update to version 4.5.2.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.ingate.com/relnote-452.php

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers