{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-05T00:00:00", "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-11-13T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "24764", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24764"}, {"name": "ADV-2007-1271", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1271"}, {"name": "20070404 Enterasys Networks Multiple NetSight Products Multiple Vulnerabilities", "tags": ["third-party-advisory", "x_refsource_IDEFENSE"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506"}, {"name": "1017876", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017876"}, {"name": "34627", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/34627"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2343", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "24764", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24764"}, {"name": "ADV-2007-1271", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1271"}, {"name": "20070404 Enterasys Networks Multiple NetSight Products Multiple Vulnerabilities", "refsource": "IDEFENSE", "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506"}, {"name": "1017876", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017876"}, {"name": "34627", "refsource": "OSVDB", "url": "http://osvdb.org/34627"}, {"name": "http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf", "refsource": "CONFIRM", "url": "http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2343", "datePublished": "2007-04-27T17:00:00", "dateReserved": "2007-04-27T00:00:00", "dateUpdated": "2008-11-13T10:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:enterasys:netsight_console:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C5D3152-F50E-4D21-A452-7A909372E8D4", "versionEndIncluding": "2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:enterasys:netsight_inventory_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "7D4C8415-E1A6-4CE0-B8E6-59F70575135D", "versionEndIncluding": "2.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer basado en pila en el componente TFTPD en Enterasys NetSight Console 2.1 y NetSight Inventory Manager 2.1, y posiblemente anteriores, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de paquetes de respuestas manipuladas que contienen nombres de fichero largos."}], "id": "CVE-2007-2343", "lastModified": "2011-03-08T02:54:02.797", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-27T17:19:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/34627"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://secunia.com/advisories/24764"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1017876"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1271"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}