PT-2010-3948 · Seil · Seil/X2+2

Published 2010-08-30 · Updated 2017-08-17 · CVE-2010-2363

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions SEIL/X1 versions 1.00 through 2.73 SEIL/X2 versions 1.00 through 2.73 SEIL/B1 versions 1.00 through 2.73

Description The IPv6 Unicast Reverse Path Forwarding (RPF) implementation does not properly drop packets when strict mode is used, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.

Recommendations For SEIL/X1 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available. For SEIL/X2 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available. For SEIL/B1 versions 1.00 through 2.73, consider disabling strict mode in the IPv6 Unicast Reverse Path Forwarding (RPF) implementation until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-2363

Affected Products

Seil/B1

Seil/X1

Seil/X2

References · 6

• http://seil.jp/seilseries/security/2010/a00875.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2363 · Security Note
• http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html · Note
• http://jvn.jp/en/jp/JVN12683004/index.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61382 · Note
• http://secunia.com/advisories/41088 · Note