CVSS: 5.4EPSS: 0%CPEs: 9EXPL: 0CVE-2013-7312
https://notcve.org/view.php?id=CVE-2013-7312
The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149. La implementación en switches y routers Enterasys no considera la posibilidad de valores Link State ID duplicados en paquetes Link State Advertisement (LSA) antes de realizar operaciones en la base de datos LSA, lo que permite a atacantes remotos provocar una denegación de servicio (interrupción de enrutamiento) u obtener información sensible de paquetes a través de un paquete LSA manipulado, una vulnerabilidad relacionada con CVE-2013-0149. • http://www.kb.cert.org/vuls/id/229804 http://www.kb.cert.org/vuls/id/BLUU-985QS8 https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3 https://cp-enterasys.kb.net/article.aspx?article=15134&p=1 •
CVSS: 10.0EPSS: 90%CPEs: 2EXPL: 1CVE-2011-5227 – Enterasys NetSight - 'nssyslogd.exe' Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2011-5227
Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote attackers to execute arbitrary code via a long PRIO field in a message to UDP port 514. Desbordamiento de búfer basado en pila en el servicio Syslog (nssyslogd.exe) en Enterasys Network Management Suite (NMS) anteriores a v4.1.0.80, permite a atacantes remotos ejecutar código de su elección a través de un campo PRIO largo en un mensaje UDP sobre el puerto 514 • https://www.exploit-db.com/exploits/23887 http://secunia.com/advisories/47263 http://www.securitytracker.com/id?1026440 http://www.zerodayinitiative.com/advisories/ZDI-11-350 https://cp-enterasys.kb.net/display/4n/kb/article.aspx?aid=14206&n=3&tab=search&bt=4n&s= https://cp-enterasys.kb.net/utility/downloadArticle.aspx?aid=14206 https://exchange.xforce.ibmcloud.com/vulnerabilities/71889 - • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 36%CPEs: 2EXPL: 1CVE-2007-2343
https://notcve.org/view.php?id=CVE-2007-2343
Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names. Desbordamiento de búfer basado en pila en el componente TFTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, permite a atacantes remotos ejecutar código de su elección a través de paquetes de respuestas manipuladas que contienen nombres de fichero largos. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 http://osvdb.org/34627 http://secunia.com/advisories/24764 http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf http://www.securitytracker.com/id?1017876 http://www.vupen.com/english/advisories/2007/1271 •
CVSS: 7.8EPSS: 2%CPEs: 2EXPL: 0CVE-2007-2344
https://notcve.org/view.php?id=CVE-2007-2344
The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service (daemon crash) via a UDP packet that contains an invalid "packet type" field. El componente BOOTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, sobre Windows permite a atacantes remotos provocar denegación de servicio (caida de demonio) a través de un paquete UDP que contiene un campo "tipo de paquete" no valido. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506 http://osvdb.org/34628 http://secunia.com/advisories/24764 http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf http://www.securitytracker.com/id?1017876 http://www.vupen.com/english/advisories/2007/1271 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2005-2026
https://notcve.org/view.php?id=CVE-2005-2026
Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges. • http://secunia.com/advisories/15757 http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdf •