CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1320

Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service crash via 1 a long request to FxIAList on TCP port 6162, or 2 an SNMP request with a long community string to FxAgent on UDP port 6161...

CVE-2008-1322

The CVE-2008-1322 issue affects ASG-Sentry Network Manager, specifically the File Check Utility (fcheck.exe) bundled with versions up to 7.0.0. The connected Nessus entry documents that fcheck.exe fails to sanitize input when creating index files, allowing an unauthenticated remote attacker to ov...

CVE-2008-1320

ASG-Sentry Network Manager version 7.0.0 and earlier is affected by multiple buffer overflows in FxIAList (TCP 6162) and FxAgent SNMP with a long community string (UDP 6161). The underlying issue is buffer overflows, allowing remote attackers to execute arbitrary code or trigger a denial of servi...

CVE-2008-1322

The File Check Utility fcheck.exe in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service CPU consumption or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability...

CVE-2008-1321

The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service service termination via the exit command to TCP port 6162, or have other impacts via other commands...

CVE-2008-1321

The CVE describes a vulnerability in the FxIAList service of ASG-Sentry Network Manager 7.0.0 and earlier . The affected component is the FxIAList service ; the root cause is an authentication-involved condition that allows remote attackers to trigger a denial of service (service termination) by ...

ASG-Sentry <= 7.0.0 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: = 7.0.0 Platforms: Windows and Unix Bugs: A arbitrary files deleting B heap-overflow in FxAgent C termination of FxIAList D buffer-overflow in FxIAList Exploitation: remote Date: 10 Mar...

Multiple vulnerabilities in ASG-Sentry 7.0.0

Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: = 7.0.0 Platforms: Windows and Unix Bugs: A arbitrary files deleting B heap-overflow in FxAgent C termination of FxIAList D buffer-overflow in FxIAList Exploitation: remote Date: 10 Mar 2008 Author: Luigi Auriemma e-mail:...

ASG-Sentry 7.0.0存在多个漏洞

BUGTRAQ ID: 28188 CNCAN ID:CNCAN-2008031104 ASG-Sentry是一款网关管理软件。 ASG-Sentry存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务和任意代码执行攻击。 - fcheck.exe CGI -b选项处理存在问题，可导致任意文件删除。 - FxAgent进程处理包含超长community字段的SNMP请求时存在堆溢出问题。 - FxIAList不正确验证"exit"命令，任何用户可执行此命令使服务退出。 - FxIAList拷贝数据到缓冲区时存在缓冲区溢出。 ASG-Sentry 7.0 目前没有解决方案提供：...

ASG-Sentry multiple security vulnerabilities

Unauthorized files access, buffer overflows, DoS...

asg-sentry 7.0.0 - Multiple Vulnerabilities

asg-sentry 7.0.0 - Multiple Vulnerabilities Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provi...

ASG-Sentry <= 7.0.0 Multiple Remote Vulnerabilities

Exploit for multiple platform in category dos / poc =================================================== ASG-Sentry From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provide y...

asg-sentry 7.0.0 - Multiple Vulnerabilities

Luigi Auriemma Application: ASG-Sentry http://www.asg-sentry.com Versions: From vendor's website: "The ASG-Sentry family of products is a suite of tools strategically engineered to control, monitor, manage, and enhance your network. Sentry's tools provide you with full visibility to your network...

CVE-2007-4242

CVE-2007-4242 affects the Pop3 Proxy in Astaro Security Gateway (ASG) 7 . The issue is that attachments exceeding the maximum allowed size are not scanned for viruses and are passed through, enabling a bypass of virus scanning. The connected documents confirm the affected component and the root c...

CVE-2007-4243

CVE-2007-4243 affects Astaro Security Gateway (ASG) 7, via a flaw in pfilter-reporter.pl that can cause a denial of service by consuming CPU when handling certain network traffic. Public demonstrations referenced P2P and iTunes traffic consuming large data volumes. Multiple connected sources reaf...

CVE-2007-3253

The CVE-2007-3253 entry relates to Astaro Security Gateway (ASG) prior to 7.005. The documented issues are three DoS vectors: (1) email path triggering the SMTP Proxy to stop during scanning, (2) HTTP traffic causing the HTTP proxy to stop or slow during responses that include virus-scanned pages...