Unscored severity · published Apr 27, 2007
CVE-2007-2343
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute…
–
CVSS
4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
Netsight Console · Enterasys
through 2.1 · source: NVD
NI
Netsight Inventory Manager · Enterasys
through 2.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2343
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2343
Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506
osvdb.org
http://osvdb.org/34627
Exploit
http://secunia.com/advisories/24764
Patch
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
www.securitytracker.com
http://www.securitytracker.com/id?1017876
www.vupen.com
http://www.vupen.com/english/advisories/2007/1271
More from Netsight Console
–
CVE-2007-2344
The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service…