Unscored CVE-2007-2343 EUVD-2007-2338GHSA-hx4p-j84q-ch4q

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earli…

Published Apr 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.

References

24764 third-party-advisory
ADV-2007-1271 vdb-entry
20070404 Enterasys Networks Multiple NetSight Products Multiple Vulnerabilities third-party-advisory
1017876 vdb-entry
34627 vdb-entry
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf