PT-2007-3677 · Enterasys · Enterasys Netsight Console+1

Publicado 2007-04-27 · Atualizado 2011-03-08 · CVE-2007-2344

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Enterasys NetSight Console versions 2.1 and earlier Enterasys NetSight Inventory Manager versions 2.1 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a UDP packet with an invalid packet type field.

Recommendations For Enterasys NetSight Console version 2.1 and earlier, consider restricting access to the BOOTPD component until a fix is available. For Enterasys NetSight Inventory Manager version 2.1 and earlier, consider restricting access to the BOOTPD component until a fix is available.

Correção

Identificadores relacionados

CVE-2007-2344

Produtos afetados

Enterasys Netsight Console

Enterasys Netsight Inventory Manager

Referências · 7

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 · Nota
• http://secunia.com/advisories/24764 · Aviso do Fabricante
• http://enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2344 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1271 · Nota
• http://osvdb.org/34628 · Nota
• http://securitytracker.com/id?1017876 · Nota