Lucene search

K
cve[email protected]CVE-2009-3947
HistoryNov 16, 2009 - 8:30 p.m.

CVE-2009-3947

2009-11-1620:30:00
CWE-119
web.nvd.nist.gov
26
cve-2009-3947
buffer overflow
ftp service
tandberg mxp f7.0
remote attack
denial of service
execute arbitrary code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.137 Low

EPSS

Percentile

95.7%

Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reboot) or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters.

Affected configurations

NVD
Node
tandbergtandberg_mxp_endpointsMatchf7.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.137 Low

EPSS

Percentile

95.7%

Related for CVE-2009-3947