SMSGATE.4 Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

Bugtraq ID:	47613
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 27 2011 12:00AM
Updated:	Apr 27 2011 12:00AM
Credit:	Alexey Sintsov of Digital Security Research Group.
Vulnerable:	NEVO-ASC SMSGATE.4 4.05r NEVO-ASC SMSGATE.4 4.04r
Not Vulnerable:	NEVO-ASC SMSGATE.4 4.07r

SMSGATE.4 Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

SMSGATE.4 is prone to a remote denial-of-service and a memory-corruption vulnerability.

Attackers can exploit these issues to crash the application, resulting in denial-of-service conditions. Given the nature of some of these issues, attackers may also be able to execute arbitrary code, but this has not been confirmed.

Versions prior to SMSGATE.4 4.07r are vulnerable.

SMSGATE.4 Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SMSGATE.4 Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

Solution:
Updates are available. Please see the references for more details.

SMSGATE.4 Multiple Remote Denial Of Service and Memory Corruption Vulnerabilities

References:

• [DSECRG-11-019] SMSGate - Memory corruption (Alexey Sintsov)
  
• SMSGATE.4 Homepage (NEVO-ASC)