We are pleased to announce that on 28 December 2015, our office will be relocated to the following address. Please note that all contact information (telephone, fax, e-mail and web address) will remained unchanged. New Address: 114 Lavender Street #10-75 CT Hub 2 Singapore 338729 Telephone: +65 6858 6789 (unchanged) Fax: +65 6487 4567 (unchanged) […]
ANTlabs is pleased to announce that our online learning portal (https://edu.antlabs.com/) is now available to all partners worldwide. The new online learning portal offers training courses that aims to equip partners with the relevant knowledge (products and processes) to work more effectivity and efficiency. Course content is provided in short, well-defined modules and some of these courses comes with a certification.
For more details on the available courses, please contact your account manager or email to sales@antlabs.com to request for permission to access the portal.
Publication Date: 06 Jul 2015 Description SQL Injection Vulnerability A vulnerability which allows user to perform queries on the underlying datastore via ppli URL parameter of the default login page main.ant; CVE-2015-2849 Cross-Site Scripting Vulnerability A reflected cross-site scripting vulnerability exists in the msg URL parameter of the admin login page index-login.ant; CVE-2015-2850 Impact A remote […]
To the savvy traveller, few things rival the importance of staying connected – to stay in touch with family, share their adventures live with friends, or keep tabs on work. Good Internet connectivity will always be one of the first things travellers look for abroad, sometimes even before comfort. And it better be free – people […]
Security Advisory Updated: 12 Jan 2022 Publication Date: 26 March 2015 Description An incorrect rsync configuration on certain models of our gateway products allows an external system to obtain unrestricted remote read/write file access. Impact A remote unauthenticated user with unrestricted access to the rsync port to affected gateway products may be allowed full read/write […]
We would like to proactively inform you about a zero-day vulnerability found with some of our InnGate HSIA gateways. We also would like to update you that a fix for the vulnerability is already available since 26 Mar 2015 and that we are actively working with our partners to patch your InnGate to secure it. […]
We are pleased to announce that Internet access may now be provisioned via Facebook login on the IG 3100. This feature is part of the IG 3100’s Patch 06 and is available as a free upgrade. It allows administrators to add a new authentication method to the built-in login portal which enables users to login […]
A buffer overflow vulnerability in the glibc gethostbyname() function was publicly announced on January 27, 2015. The issue is identified by CVE-2015-0235 and was given the name “Ghost.” The ANTlabs Engineering Team started investigating this issue immediately. This vulnerability is related to the various gethostbyname functions included in glibc and affect applications that call these functions. […]
The “Poodle” vulnerability, released on October 14th, 2014, is an attack on the SSL 3.0 protocol. It is a protocol flaw and every implementation of SSL 3.0 suffers from it. Note that we are talking about the old SSL 3.0, not TLS 1.0 or later. The TLS versions are not affected (neither is DTLS) by […]
Please be informed that ANTlabs products are not affected by “ShellShock” Bash Vulnerability. This is mainly because our products are appliance-based and do not use bash for console shell access. Administrators use ANTlabs’ own customised shell (that is not subject to the ShellShock Bash vulnerability) to access the command line interface. In addition, these products […]