ID CVE-2006-4832
Summary Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via a long username.
References
Vulnerable Configurations
  • cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9200_series:*:*:*:*:*:*:*
    cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9200_series:*:*:*:*:*:*:*
  • cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9300_series:*:*:*:*:*:*:*
    cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9300_series:*:*:*:*:*:*:*
  • cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9500_series:*:*:*:*:*:*:*
    cpe:2.3:h:verso_netperformer:frame_relay_access_device_act:sdm-9500_series:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 17-10-2018 - 21:39)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 19989
bugtraq 20060913 NetPerformer FRAD ACT Multiple Vulnerabilities
fulldisc 20060913 NetPerformer FRAD ACT Multiple Vulnerabilities
secunia 21876
sreason 1583
vupen ADV-2006-3605
xf netperformer-telnet-username-bo(28908)
Last major update 17-10-2018 - 21:39
Published 15-09-2006 - 22:07
Last modified 17-10-2018 - 21:39
Back to Top