PT-2015-4980 · Antlabs · Inngate

Justin Clarke + 1 · Publicado 2015-04-05 · Atualizado 2015-04-15 · CVE-2015-0932

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ANTlabs InnGate firmware versions on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G

Description The issue allows remote attackers to read or write to arbitrary files via TCP traffic on port 873, due to the lack of authentication requirement for rsync sessions.

Recommendations For all affected versions, consider restricting access to TCP port 873 to minimize the risk of exploitation. As a temporary workaround, restrict rsync sessions to only trusted sources until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-0932

Produtos afetados

Inngate

Referências · 5

• 🔥 http://blog.cylance.com/spear-team-cve-2015-0932 · Exploit
• http://wired.com/2015/03/big-vulnerability-hotel-wi-fi-router-puts-guests-risk · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0932 · Nota de Segurança
• http://antlabs.com/index.php?option=com_content&view=article&id=195:rsync-remote-file-system-access-vulnerability-cve-2015-0932&catid=54:advisories&Itemid=133 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/930956 · Nota