Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
BID:14017
Info
Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
| Bugtraq ID: | 14017 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2005 12:00AM |
| Updated: | Jun 21 2005 12:00AM |
| Credit: | Jacek Lipkowski <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Enterasys Networks Vertical Horizon VH-2402S 02.05.09.07 Enterasys Networks Vertical Horizon VH-2402S 02.05.00 |
| Not Vulnerable: |
Enterasys Networks Vertical Horizon VH-2402S 02.05.09.08 |
Discussion
Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
The Enterasys Vertical Horizon switch has administrative access that cannot be disabled. Upon connecting to the Telnet administration interface as a guest user, an attacker may invoke debugging commands.
Exploitation of this issue will allow a remote attacker to deny service for other legitimate users that are connected to the switch.
The Enterasys Vertical Horizon switch has administrative access that cannot be disabled. Upon connecting to the Telnet administration interface as a guest user, an attacker may invoke debugging commands.
Exploitation of this issue will allow a remote attacker to deny service for other legitimate users that are connected to the switch.
Exploit / POC
Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
Solution:
The vendor has released an advisory and updates (Firmware version: 2.05.09.08) to address this issue. Customers are advised to peruse the referenced advisory for further information regarding obtaining and applying appropriate updates.
Solution:
The vendor has released an advisory and updates (Firmware version: 2.05.09.08) to address this issue. Customers are advised to peruse the referenced advisory for further information regarding obtaining and applying appropriate updates.
References
Enterasys Networks Vertical Horizon Remote Denial Of Service Vulnerability
References:
References:
- Enterasys Networks Homepage (Enterasys Networks)
- Vertical Horizon Patch Release (Enterasys Networks)
- Undocumented account vulnerability in Enterasys Vertical Horizon switches (Jacek Lipkowski