PT-1998-1201 · Us Robotics/3Com · Us Robotics/3Com Total Control Chassis With Frame Relay

Publicado 1998-05-11 · Atualizado 2016-10-18 · CVE-1999-1389

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions US Robotics/3Com Total Control Chassis with Frame Relay versions 3.6.22 through 3.7.24

Description The issue concerns the improper enforcement of access filters when a specific setting is applied. Attackers can bypass restrictions by providing the hostname twice at the "host: " prompt.

Recommendations For versions 3.6.22 through 3.7.24, consider disabling the "set host prompt" setting for all ports to prevent attackers from bypassing access filters. Restrict access to the "host: " prompt to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1389

Produtos afetados

Us Robotics/3Com Total Control Chassis With Frame Relay

Referências · 3

• http://securityfocus.com/bid/99 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=90221101925916&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1389 · Nota de Segurança