Lucene search

K
cve[email protected]CVE-2011-5227
HistoryOct 25, 2012 - 5:55 p.m.

CVE-2011-5227

2012-10-2517:55:06
CWE-119
web.nvd.nist.gov
26
cve-2011-5227
enterasys network management suite
buffer overflow
syslog service
security vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.907 High

EPSS

Percentile

98.8%

Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514.

Affected configurations

NVD
Node
enterasysnetsightRange4.1.0.79
OR
enterasysnetsightRange4.1.0.79

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

Low

0.907 High

EPSS

Percentile

98.8%

Related for CVE-2011-5227