CVE-2012-2606

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack...

CVE-2012-2604

Multiple cross-site scripting XSS vulnerabilities in GuestAccess.jsp in the Guest/Contractor access component in the administrative interface in Bradford Network Sentry before 5.3.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified fields...

Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities

Overview Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities which could allow an attacker to execute arbitrary code with the privileges of the application. Description Bradford Network Sentry v5.3 NS500 appliance contains multiple vulnerabilities:CWE-79: Improper...

Stack overflow

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

CVE-2008-4548

Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control CamPanel.dll in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method...

CVE-2008-4548

CVE-2008-4548 affects RTS Sentry 2.1.0.2 via the PTZCamPanelCtrl ActiveX (CamPanel.dll). The root cause is a stack-based buffer overflow triggered by a long second argument to ConnectServer, enabling remote code execution. Public references (NVD, CVE lists, exploit-db) confirm the vulnerability a...

ASG-Sentry CGI Detection

The remote CGI script is part of ASG-Sentry, a web-based SNMP network management system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid34394; scriptversion"1.15";...

ASG-Sentry File Check Utility /snmx-cgi/fcheck.exe Arbitrary File Overwrite

The File Check Utility fcheck.exe included with the version of ASG-Sentry installed on the remote host fails to sanitize input before creating index files with filenames and checksums. An unauthenticated remote attacker can leverage this issue to overwrite existing files with either no data or a...

ASG-Sentry SNMP Agent Detection

The remote SNMP agent is part of ASG-Sentry, a web-based SNMP network management system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34396; scriptversion"1.13"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"ASG-Sentry SNMP Agent Detection";...

ASG-Sentry CGI Default Credentials

The remote ASG-Sentry CGI script is configured to use default credentials to control administrative access. Knowing these, an attacker can gain administrative control of the affected application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Unfixed XSS vulnerability at www.cyber-sentry.com

Security researcher Azat Harutyunyan, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting www.cyber-sentry.com, which at the time of submission ranked 1524996 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008...

Design/Logic Flaw

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1321

The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service service termination via the exit command to TCP port 6162, or have other impacts via other commands...

Buffer overflow

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1322

The CVE-2008-1322 issue affects ASG-Sentry Network Manager, specifically the File Check Utility (fcheck.exe) bundled with versions up to 7.0.0. The connected Nessus entry documents that fcheck.exe fails to sanitize input when creating index files, allowing an unauthenticated remote attacker to ov...

CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1320

ASG-Sentry Network Manager version 7.0.0 and earlier is affected by multiple buffer overflows in FxIAList (TCP 6162) and FxAgent SNMP with a long community string (UDP 6161). The underlying issue is buffer overflows, allowing remote attackers to execute arbitrary code or trigger a denial of servi...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...