CVE-2007-2343 | BDVDB-2026-23824 Detail

Description#

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/24764
http://www.vupen.com/english/advisories/2007/1271
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506
http://www.securitytracker.com/id?1017876
http://osvdb.org/34627
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf

Exploit#

No public exploit known

History#

Version 12007-04-27Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.