Multiple ANTlabs Products CVE-2015-0932 Arbitrary File Access Vulnerability

Bugtraq ID:	73356
Class:	Design Error
CVE:	CVE-2015-0932
Remote:	Yes
Local:	No
Published:	Mar 26 2015 12:00AM
Updated:	Mar 26 2015 12:00AM
Credit:	Justin W. Clarke of Cylance Inc.
Vulnerable:	ANTlabs InnGate 3.10 G-Series 0 ANTlabs InnGate 3.10 E-Series 0 ANTlabs InnGate 3.02 E-Series 0 ANTlabs InnGate 3.01 G-Series 0 ANTlabs InnGate 3.01 E-Series 0 ANTlabs InnGate 3.00 E-Series 0 ANTlabs IG 3101 0 ANTlabs IG 3100 0
Not Vulnerable:

Multiple ANTlabs Products CVE-2015-0932 Arbitrary File Access Vulnerability

Multiple ANTlabs products are prone to an arbitrary file-access vulnerability.

An attacker can exploit this issue to read or write arbitrary files on the affected device's filesystem, which may aid in further attacks.

Multiple ANTlabs Products CVE-2015-0932 Arbitrary File Access Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple ANTlabs Products CVE-2015-0932 Arbitrary File Access Vulnerability

References:

• ANTlabs Homepage (ANTlabs)
  
• Big Vulnerability in Hotel Wi-Fi Router Puts Guests at Risk (Wired)
  
• Vulnerability: CVE-2015-0932 (Cylance)
  
• Rsync remote file system access vulnerability CVE-2015-0932 (ANTlabs)
  
• Vulnerability Note VU#930956 Multiple ANTlabs InnGate models allow unauthenticat (CERT)