PT-2011-4804 · D Link · Des-3800+2

Hisashi Kojima + 1 · Published 2011-11-03 · Updated 2018-10-30 · CVE-2011-3992

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DES-3800 versions prior to 4.50B052 D-Link DWL-2100AP versions prior to 2.50RC548 D-Link DWL-3200AP versions prior to 2.55RC549

Description A buffer overflow issue exists in the SSH server functionality, allowing remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Recommendations For D-Link DES-3800 versions prior to 4.50B052, update to firmware version 4.50B052 or later. For D-Link DWL-2100AP versions prior to 2.50RC548, update to firmware version 2.50RC548 or later. For D-Link DWL-3200AP versions prior to 2.55RC549, update to firmware version 2.55RC549 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-3992

Affected Products

Des-3800

Dwl-2100Ap

Dwl-3200Ap

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-3992 · Security Note
• http://securityfocus.com/bid/50405 · Note
• http://jvn.jp/en/jp/JVN72640744/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092 · Note
• http://dlink-jp.com/page/sc/F/security_info20111028.html · Note
• http://osvdb.org/76628 · Note