ASG-Sentry 7.0.0 Multiple Remote Vulnerabilities

Bugtraq ID:	28188
Class:	Unknown
CVE:	CVE-2008-1321 CVE-2008-1322 CVE-2008-1320
Remote:	Yes
Local:	No
Published:	Mar 10 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	ASG ASG-Sentry 7.0
Not Vulnerable:

ASG-Sentry 7.0.0 Multiple Remote Vulnerabilities

ASG-Sentry is prone to multiple remote vulnerabilities:

- A heap-based buffer-overflow vulnerability
- A stack-based buffer-overflow vulnerability
- A denial-of-service vulnerability
- An arbitrary-file-deletion vulnerability

An attacker can exploit these issues to execute arbitrary code within the context of the affected application, crash the affected application, consume all CPU resources, and delete data contained in arbitrary files. Other attacks are possible.

These issues affect ASG-Sentry 7.0.0; other versions may also be affected.

ASG-Sentry 7.0.0 Multiple Remote Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/asgulo.zip

ASG-Sentry 7.0.0 Multiple Remote Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ASG-Sentry 7.0.0 Multiple Remote Vulnerabilities

References:

• ASG-Sentry Homepage (ASG)
  
• Multiple vulnerabilities in ASG-Sentry 7.0.0 (Luigi Auriemma )