Vulnerability CVE-2007-2343
Published: 2007-04-27   Modified: 2012-02-12

Description:
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Enterasys -> Netsight console 
Enterasys -> Netsight inventory manager 

 References:
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
http://www.vupen.com/english/advisories/2007/1271
http://www.securitytracker.com/id?1017876
http://secunia.com/advisories/24764
http://osvdb.org/34627
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506
Copyright 2024, cxsecurity.com

 

Back to Top