PT-2005-3255 · Mrv Communications · In-Reach Lx-4000S+2

Publicado 2005-07-20 · Atualizado 2008-09-05 · CVE-2005-2329

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S version 3.5.0

Description The issue allows remote authenticated users to access the consoles of other users when using SSH public key authentication, due to improper restriction of access to ports.

Recommendations For MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S version 3.5.0, consider restricting access to SSH public key authentication until a proper fix is available. As a temporary workaround, restrict access to the consoles of other users to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-2329

Produtos afetados

In-Reach Lx-1000S

In-Reach Lx-4000S

In-Reach Lx-8000S

Referências · 4

• 🔥 http://securityfocus.com/archive/1/405546 · Exploit
• http://securitytracker.com/id?1014517 · Nota
• http://securityfocus.com/bid/14300 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2329 · Nota de Segurança