PT-2007-3677 · Enterasys · Enterasys Netsight Console+1

Published 2007-04-27 · Updated 2011-03-08 · CVE-2007-2344

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Enterasys NetSight Console versions 2.1 and earlier Enterasys NetSight Inventory Manager versions 2.1 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a UDP packet with an invalid packet type field.

Recommendations For Enterasys NetSight Console version 2.1 and earlier, consider restricting access to the BOOTPD component until a fix is available. For Enterasys NetSight Inventory Manager version 2.1 and earlier, consider restricting access to the BOOTPD component until a fix is available.

Fix

Related Identifiers

CVE-2007-2344

Affected Products

Enterasys Netsight Console

Enterasys Netsight Inventory Manager

References · 7

• http://secunia.com/advisories/24764 · Vendor Advisory
• http://enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2344 · Security Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 · Note
• http://vupen.com/english/advisories/2007/1271 · Note
• http://osvdb.org/34628 · Note
• http://securitytracker.com/id?1017876 · Note