CVE-2004-2252: Sophos Astaro Security Linux

Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days.

The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks.

Affected products

• Sophos Astaro Security Linux: before 4.024 (fixed in 4.024)

Published 2004-12-31. Last modified 2026-06-16.