PT-2008-2911 · Asg · Asg-Sentry Network Manager

Luigi Auriemma · Published 2008-03-13 · Updated 2018-10-11 · CVE-2008-1320

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASG-Sentry Network Manager versions 7.0.0 and earlier

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service via a long request to "FxIAList" on TCP port 6162, or an SNMP request with a long community string to "FxAgent" on UDP port 6161.

Recommendations For ASG-Sentry Network Manager versions 7.0.0 and earlier, consider restricting access to TCP port 6162 and UDP port 6161 until a patch is available. As a temporary workaround, consider disabling the FxIAList and FxAgent services to minimize the risk of exploitation. Avoid using long community strings in SNMP requests to FxAgent until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1320

Affected Products

Asg-Sentry Network Manager

References · 10

• 🔥 https://exploit-db.com/exploits/5229 · Exploit
• 🔥 http://aluigi.altervista.org/adv/asgulo-adv.txt · Exploit
• http://secunia.com/advisories/29289 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1320 · Security Note
• http://securityreason.com/securityalert/3737 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41086 · Note
• http://vupen.com/english/advisories/2008/0839/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41082 · Note
• http://securityfocus.com/archive/1/489359/100/0/threaded · Note
• http://securityfocus.com/bid/28188 · Note