PT-2006-5591 · Verso · Verso Netperformer Frad Act Sdm-95Xx+2

Arif Jatmiko · Published 2006-09-15 · Updated 2018-10-17 · CVE-2006-4833

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Verso NetPerformer FRAD ACT SDM-95xx versions 7.xx (R1) and earlier Verso NetPerformer FRAD ACT SDM-93xx versions 10.x.x (R2) and earlier Verso NetPerformer FRAD ACT SDM-92xx versions 9.x.x (R1) and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in the device hanging or rebooting, via an ICMP packet with the same destination and source address and port.

Recommendations For Verso NetPerformer FRAD ACT SDM-95xx versions 7.xx (R1) and earlier, update to a version later than 7.xx (R1) to resolve the issue. For Verso NetPerformer FRAD ACT SDM-93xx versions 10.x.x (R2) and earlier, update to a version later than 10.x.x (R2) to resolve the issue. For Verso NetPerformer FRAD ACT SDM-92xx versions 9.x.x (R1) and earlier, update to a version later than 9.x.x (R1) to resolve the issue. As a temporary workaround, consider restricting ICMP packet traffic to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-4833

Affected Products

Verso Netperformer Frad Act Sdm-92Xx

Verso Netperformer Frad Act Sdm-93Xx

Verso Netperformer Frad Act Sdm-95Xx

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-4833 · Security Note
• http://secunia.com/advisories/21876 · Vendor Advisory
• http://securityfocus.com/bid/19990 · Note
• http://securityreason.com/securityalert/1583 · Note
• http://securityfocus.com/archive/1/445883/100/0/threaded · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html · Note
• http://vupen.com/english/advisories/2006/3605 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28909 · Note