PT-2007-1598 · Packeteer · Packeteer Packetshaper Packetwise

Kian Mohageri · Publicado 2007-01-09 · Atualizado 2018-10-16 · CVE-2007-0113

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Packeteer PacketShaper PacketWise versions 8.x

Description The issue allows remote authenticated users to cause a denial of service, resulting in a reset or reboot, by exploiting a buffer overflow. This can be achieved through either a long traffic class argument to the "class show" command or a long POLICY parameter value in clastree.htm.

Recommendations For Packeteer PacketShaper PacketWise versions 8.x, consider restricting access to the class show command and limiting the length of the POLICY parameter value in clastree.htm to prevent exploitation until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0113

Produtos afetados

Packeteer Packetshaper Packetwise

Referências · 9

• 🔥 http://securityfocus.com/bid/21933 · Exploit
• 🔥 https://exploit-db.com/exploits/29402 · Exploit
• http://securityfocus.com/archive/1/456267/100/0/threaded · Nota
• http://securityreason.com/securityalert/2110 · Nota
• http://vupen.com/english/advisories/2007/0098 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31357 · Nota
• http://osvdb.org/31656 · Nota
• http://secunia.com/advisories/23685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0113 · Nota de Segurança