PT-2010-3948 · Seil · Seil/X2+2

Publicado 2010-08-30 · Atualizado 2017-08-17 · CVE-2010-2363

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SEIL/X1 versions 1.00 through 2.73 SEIL/X2 versions 1.00 through 2.73 SEIL/B1 versions 1.00 through 2.73

Description The IPv6 Unicast Reverse Path Forwarding (RPF) implementation does not properly drop packets when strict mode is used, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.

Recommendations For SEIL/X1 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available. For SEIL/X2 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available. For SEIL/B1 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-2363

Produtos afetados

Seil/B1

Seil/X1

Seil/X2

Referências · 6

• http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html · Nota
• http://seil.jp/seilseries/security/2010/a00875.php · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN12683004/index.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61382 · Nota
• http://secunia.com/advisories/41088 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2363 · Nota de Segurança