PT-2013-1382

CVE-2010-5288

·

تاريخ النشر

2013-06-28

·

تاريخ التحديث

2013-07-01

الوصف من

CVSS 2.0
7.5
عالية
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions EDItran Communications Platform version 4.1 R7
Description The issue is related to a buffer overflow in the lsConnectionCached function in editcp, which can be triggered by remote attackers sending a crafted packet to TCP port 7777. This can cause a denial of service, resulting in a daemon crash, or potentially allow the execution of arbitrary code.
Recommendations For EDItran Communications Platform version 4.1 R7, consider restricting access to TCP port 7777 until a patch is available. As a temporary workaround, disabling the lsConnectionCached function in editcp may help mitigate the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾