CVE-2007-2343

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506	Vendor Advisory
http://osvdb.org/34627
http://secunia.com/advisories/24764	Exploit Vendor Advisory
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf	Patch
http://www.securitytracker.com/id?1017876
http://www.vupen.com/english/advisories/2007/1271

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:enterasys:netsight_console::::::::
	cpe:2.3:a:enterasys:netsight_inventory_manager::::::::

History

No history.

Information

Published : 2007-04-27 17:19

Updated : 2011-03-08 02:54

NVD link : CVE-2007-2343

Mitre link : CVE-2007-2343

CVE.ORG link : CVE-2007-2343

JSON object : View

Products Affected

enterasys

netsight_inventory_manager
netsight_console

CWE

NVD-CWE-Other

{"id": "CVE-2007-2343", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-04-27T17:19:00.000", "references": [{"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/34627", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24764", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1017876", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/1271", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el componente TFTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de paquetes de respuestas manipuladas que contienen nombres de fichero largos."}], "lastModified": "2011-03-08T02:54:02.797", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:enterasys:netsight_console:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C5D3152-F50E-4D21-A452-7A909372E8D4", "versionEndIncluding": "2.1"}, {"criteria": "cpe:2.3:a:enterasys:netsight_inventory_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D4C8415-E1A6-4CE0-B8E6-59F70575135D", "versionEndIncluding": "2.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}