CVSS: 10.0EPSS: 90%CPEs: 2EXPL: 1CVE-2011-5227 – Enterasys NetSight - 'nssyslogd.exe' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2011-5227
Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514. Desbordamiento de búfer basado en pila en el servicio Syslog (nssyslogd.exe) en Enterasys Network Management Suite (NMS) anteriores a v4.1.0.80, permite a atacantes remotos ejecutar código de su elección a través de un campo PRIO largo en un mensaje UDP sobre el puerto 514 • https://www.exploit-db.com/exploits/23887 http://secunia.com/advisories/47263 http://www.securitytracker.com/id?1026440 http://www.zerodayinitiative.com/advisories/ZDI-11-350 https://cp-enterasys.kb.net/display/4n/kb/article.aspx?aid=14206&n=3&tab=search&bt=4n&s= https://cp-enterasys.kb.net/utility/downloadArticle.aspx?aid=14206 https://exchange.xforce.ibmcloud.com/vulnerabilities/71889 - • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 36%CPEs: 2EXPL: 1CVE-2007-2343
https://notcve.org/view.php?id=CVE-2007-2343
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names. Desbordamiento de búfer basado en pila en el componente TFTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, permite a atacantes remotos ejecutar código de su elección a través de paquetes de respuestas manipuladas que contienen nombres de fichero largos. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 http://osvdb.org/34627 http://secunia.com/advisories/24764 http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf http://www.securitytracker.com/id?1017876 http://www.vupen.com/english/advisories/2007/1271 •
CVSS: 7.8EPSS: 2%CPEs: 2EXPL: 0CVE-2007-2344
https://notcve.org/view.php?id=CVE-2007-2344
The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a UDP packet that contains an invalid "packet type" field. El componente BOOTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, sobre Windows permite a atacantes remotos provocar denegación de servicio (caida de demonio) a través de un paquete UDP que contiene un campo "tipo de paquete" no valido. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 http://osvdb.org/34628 http://secunia.com/advisories/24764 http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf http://www.securitytracker.com/id?1017876 http://www.vupen.com/english/advisories/2007/1271 •