CVE-2008-1321 - The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands

Back Back to CVE browser

MEDIUM

The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands

Published Mar 13, 2008

5.0

MEDIUM

CVSS 2.0

EPSS 8.38%

Description

The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (9)

http://aluigi.altervista.org/adv/asgulo-adv.txt
x_refsource_MISCExploit
http://secunia.com/advisories/29289
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/3737
third-party-advisoryx_refsource_SREASONExploit
http://www.securityfocus.com/archive/1/489359/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28188
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2008/0839/references
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-1328
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41084
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5229
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://aluigi.altervista.org/adv/asgulo-adv.txt		x_refsource_MISCExploit
http://secunia.com/advisories/29289		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/3737		third-party-advisoryx_refsource_SREASONExploit
http://www.securityfocus.com/archive/1/489359/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28188		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2008/0839/references		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-1328		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41084		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5229		exploitx_refsource_EXPLOIT-DB