CVE-2007-2344

The CVE-2007-2344 entry concerns the BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1 (and possibly earlier) running on Windows. A remote attacker can cause a denial-of-service (daemon crash) by sending a UDP packet with an invalid “packet type” field. The ava...

CVE-2007-2343

Affected products: Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1. Component vulnerable: TFTPD. Root cause: stack-based buffer overflow. Impact: remote attackers can execute arbitrary code via crafted requests containing long file names; network-based exploit with high impact (...