Lucene search
HistoryOct 25, 2012 - 5:55 p.m.
CVE-2011-5227
cve-2011-5227
enterasys network management suite
buffer overflow
syslog service
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
Low
0.907 High
EPSS
Percentile
98.9%
Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514.
Affected configurations
Node
enterasysnetsightRange≤4.1.0.79
ORenterasysnetsightRange≤4.1.0.79
| CPE | Name | Operator | Version |
|---|---|---|---|
| enterasys:netsight | enterasys netsight | le | 4.1.0.79 |
References
Related
nvd
nvd
CVE-2011-5227
2012-10-25 17:55:06
prion
prion
Stack overflow
2012-10-25 17:55:00
cvelist
cvelist
CVE-2011-5227
2012-10-25 17:00:00
packetstorm
packetstorm
Enterasys NetSight nssyslogd.exe Buffer Overflow
2013-01-04 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.3 High
AI Score
Confidence
Low
0.907 High
EPSS
Percentile
98.9%
Related for CVE-2011-5227