Lucene search
HistoryApr 27, 2007 - 5:19 p.m.
CVE-2007-2343
cve-2007-2343
stack-based buffer overflow
enterasys netsight console
remote code execution
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
High
0.361 Low
EPSS
Percentile
97.2%
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.
Affected configurations
Node
enterasysnetsight_consoleRange≤2.1
ORenterasysnetsight_inventory_managerRange≤2.1
Related
cvelist
cvelist
CVE-2007-2343
2007-04-27 17:00:00
prion
prion
Stack overflow
2007-04-27 17:19:00
nvd
nvd
CVE-2007-2343
2007-04-27 17:19:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.2 High
AI Score
Confidence
High
0.361 Low
EPSS
Percentile
97.2%
Related for CVE-2007-2343