CVE-2007-2343 Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via cra...
HighCVSS 7.5
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enterasys netsight console | <= 2.1 | No fix listed |
| enterasys netsight inventory manager | <= 2.1 | No fix listed |
References
- 20070404 Enterasys Networks Multiple NetSight Products Multiple Vulnerabilities third-party-advisory vendor-advisory
- 34627 vdb-entry
- 24764 exploit third-party-advisory vendor-advisory
- www.enterasys.com patch
- 1017876 vdb-entry
- ADV-2007-1271 vdb-entry