PT-2012-4132
CVE-2012-2606
·
Publicado
2012-06-13
·
Atualizado
2012-06-13
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Bradford Network Sentry versions prior to 5.3.3
Description
The issue allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to "UDP port 4567", as demonstrated by a replay attack, due to the lack of authentication requirement for messages.
Recommendations
For versions prior to 5.3.3, update to version 5.3.3 or later to resolve the issue. As a temporary workaround, consider restricting access to UDP port 4567 to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾