PT-2008-2911 · Asg · Asg-Sentry Network Manager

Luigi Auriemma · Publicado 2008-03-13 · Atualizado 2018-10-11 · CVE-2008-1320

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASG-Sentry Network Manager versions 7.0.0 and earlier

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a long request to "FxIAList" on TCP port 6162, or an SNMP request with a long community string to "FxAgent" on UDP port 6161.

Recommendations For ASG-Sentry Network Manager versions 7.0.0 and earlier, consider restricting access to TCP port 6162 and UDP port 6161 until a patch is available. As a temporary workaround, consider disabling the FxIAList and FxAgent services to minimize the risk of exploitation. Avoid using long community strings in SNMP requests to FxAgent until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1320

Produtos afetados

Asg-Sentry Network Manager

Referências · 10

• 🔥 https://exploit-db.com/exploits/5229 · Exploit
• 🔥 http://aluigi.altervista.org/adv/asgulo-adv.txt · Exploit
• http://securityreason.com/securityalert/3737 · Nota
• http://secunia.com/advisories/29289 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41086 · Nota
• http://vupen.com/english/advisories/2008/0839/references · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41082 · Nota
• http://securityfocus.com/archive/1/489359/100/0/threaded · Nota
• http://securityfocus.com/bid/28188 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1320 · Nota de Segurança