PT-1998-1201 · Us Robotics/3Com · Us Robotics/3Com Total Control Chassis With Frame Relay

Published 1998-05-11 · Updated 2016-10-18 · CVE-1999-1389

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions US Robotics/3Com Total Control Chassis with Frame Relay versions 3.6.22 through 3.7.24

Description The issue concerns the improper enforcement of access filters when a specific setting is applied. Attackers can bypass restrictions by providing the hostname twice at the "host: " prompt.

Recommendations For versions 3.6.22 through 3.7.24, consider disabling the "set host prompt" setting for all ports to prevent attackers from bypassing access filters. Restrict access to the "host: " prompt to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1389

Affected Products

Us Robotics/3Com Total Control Chassis With Frame Relay

References · 3

• http://securityfocus.com/bid/99 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1389 · Security Note
• http://marc.info/?l=bugtraq&m=90221101925916&w=2 · Note