PT-2005-3821 · Avocent · Avocent Ccm Console Server

Dirk Wetter · Publicado 2005-09-19 · Atualizado 2017-07-11 · CVE-2005-2984

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Avocent CCM console server version 2.1 CCM4850

Description The issue allows remote authenticated attackers to bypass port restrictions. This can be achieved by connecting to the server via SSH and using the connect command to access the serial port.

Recommendations For Avocent CCM console server version 2.1 CCM4850, consider restricting access to the SSH connection and limiting the use of the connect command to authorized personnel only. As a temporary workaround, restrict access to the serial port until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-2984

Produtos afetados

Avocent Ccm Console Server

Referências · 6

• 🔥 http://drwetter.org/cs-probs/avocent-sshbug.txt · Exploit
• http://marc.info/?l=bugtraq&m=112680615103315&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22302 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2984 · Nota de Segurança
• http://secunia.com/advisories/16836 · Aviso do Fabricante
• http://securityfocus.com/bid/14853 · Correção