PT-2007-3611 · 3Com · 3Com Tippingpoint Ips

Published 2007-04-25 · Updated 2024-08-07 · CVE-2007-2276

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions 3Com TippingPoint IPS (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a device hang, by flooding packets on TCP port 80 with sequentially increasing source ports. This is related to a "badly written loop." The vendor disputes this issue, stating that the product has performed as expected with no denial of service emerging.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-2276

Affected Products

3Com Tippingpoint Ips

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-2276 · Security Note
• http://securityfocus.com/archive/1/466795/100/0/threaded · Note
• http://securityfocus.com/archive/1/466784/100/0/threaded · Note
• http://osvdb.org/35724 · Note
• http://securityfocus.com/bid/23644 · Note
• http://securityfocus.com/archive/1/466891/100/0/threaded · Note
• https://t.me/cvenotify/89651 · Telegram Post