CVE-2008-6701 NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator....
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscout ngenius infinistream | = i1730 | No fix listed |
| netscout visualizer | = v2100 | No fix listed |
References
- 46195 vdb-entry
- 30514 third-party-advisory vendor-advisory
- 20080606 Vulnerability in Network General/Net Scout product mailing-list
- networkgeneral-adddomain-security-bypass(42938) vdb-entry