PT-2007-5541 · Nmap+1 · Nmap+1

Published 2007-08-15 · Updated 2018-10-15 · CVE-2007-4360

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Dell Remote Access Card 4 (DRAC4) version 1.50 Build 02.16

Description The issue allows remote attackers to cause a denial of service, specifically crashing the SSH daemon, by sending certain network traffic. This can be demonstrated using an "nmap -O" scan with nmap 4.03. The problem might be related to a Mocana SSH vulnerability.

Recommendations For Dell Remote Access Card 4 (DRAC4) version 1.50 Build 02.16, consider restricting access to the SSH daemon or limiting network traffic to prevent the denial of service. As a temporary workaround, restrict the use of the SSH service until a fix is available.

Fix

Related Identifiers

CVE-2007-4360

Affected Products

Dell Remote Access Card 4

Nmap

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-4360 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35998 · Note
• http://securityfocus.com/bid/25291 · Note
• http://securityfocus.com/archive/1/476311/100/0/threaded · Note
• http://securityfocus.com/archive/1/486589/100/0/threaded · Note
• ftp://ftp.us.dell.com/sysman/readme_160_A00.txt · Note
• http://vupen.com/english/advisories/2007/2908 · Note
• http://securityfocus.com/archive/1/476301/100/0/threaded · Note
• http://secunia.com/advisories/26428 · Note