PT-2013-5153 · Seil · Seil/X2+5

Published 2013-09-20 · Updated 2015-03-05 · CVE-2013-4709

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SEIL/x86 versions prior to 2.82 SEIL/X1 versions prior to 4.32 SEIL/X2 versions prior to 4.32 SEIL/B1 versions prior to 4.32 SEIL/Turbo versions prior to 2.16 SEIL/neu 2FE Plus versions prior to 2.16

Description The issue is related to a buffer overflow in the PPP Access Concentrator (PPPAC) that allows remote attackers to execute arbitrary code via a crafted L2TP message.

Recommendations For SEIL/x86 versions prior to 2.82, update to version 2.82 or later. For SEIL/X1 versions prior to 4.32, update to version 4.32 or later. For SEIL/X2 versions prior to 4.32, update to version 4.32 or later. For SEIL/B1 versions prior to 4.32, update to version 4.32 or later. For SEIL/Turbo versions prior to 2.16, update to version 2.16 or later. For SEIL/neu 2FE Plus versions prior to 2.16, update to version 2.16 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-4709

Affected Products

Seil/B1

Seil/Turbo

Seil/X1

Seil/X2

Seil/Neu 2Fe Plus

Seil/X86

References · 4

• http://seil.jp/support/security/a01396.html · Vendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000092 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4709 · Security Note
• http://jvn.jp/en/jp/JVN43152129/index.html · Vendor Advisory