Stack-based buffer overflow in SecurityGateway.dll in Alt-N Technologies SecurityGateway 1.0.1 allows remote attackers to execute arbitrary…

Exploit prediction (EPSS)

74.61% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

• Metasploit exploit/windows/http/altn_securitygateway Alt-N SecurityGateway username Buffer Overflow · metasploit exploit, average rank · 2008-06-02
• EDB-5827 Alt-N SecurityGateway 1.00-1.01 - Remote Stack Overflow · remote · 2008-06-15
• EDB-5718 Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (PoC) · dos · 2008-06-01
• EDB-16803 Alt-N SecurityGateway 1.0.1 - 'Username' Remote Buffer Overflow (Metasploit) · remote · 2010-07-07

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• exploit-db.com /exploits/5827 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• exploit-db.com /exploits/5718 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/42769 · vdb-entry, x_refsource_XF, x_transferred
• files.altn.com /securitygateway/release/relnotes_en.htm · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/1717/references · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/30497 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /bid/29457 · vdb-entry, x_refsource_BID, x_transferred
• securitytracker.com /id?1020156 · vdb-entry, x_refsource_SECTRACK, x_transferred
• securityreason.com /securityalert/4302 · third-party-advisory, x_refsource_SREASON, x_transferred

Sources

• CVE List: CVE-2008-4193
• NVD: CVE-2008-4193

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.