Verso · Verso Netperformer Frad Act Sdm-95Xx · CVE-2006-4832
**Name of the Vulnerable Software and Affected Versions**
Verso NetPerformer FRAD ACT SDM-95xx versions 7.xx (R1) and earlier
Verso NetPerformer FRAD ACT SDM-93xx versions 10.x.x (R2) and earlier
Verso NetPerformer FRAD ACT SDM-92xx versions 9.x.x (R1) and earlier
**Description**
A buffer overflow issue exists in the telnet service, allowing remote attackers to potentially cause a denial of service, resulting in a reboot, and possibly execute arbitrary code by providing a long `username`.
**Recommendations**
For SDM-95xx versions 7.xx (R1) and earlier, consider disabling the telnet service until a fix is available.
For SDM-93xx versions 10.x.x (R2) and earlier, restrict access to the telnet service to minimize the risk of exploitation.
For SDM-92xx versions 9.x.x (R1) and earlier, avoid using long usernames in the telnet service until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.