Verso NetPerformer Frame Relay Access Device Telnet Buffer Overflow Vulnerability

Bugtraq ID:	19989
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 13 2006 12:00AM
Updated:	Sep 13 2006 10:52PM
Credit:	Arif Jatmoko discovered this issue.
Vulnerable:	Verso NetPerformer Frame Relay Access Device ACT SDM-9500 series. Verso NetPerformer Frame Relay Access Device ACT SDM-9300 series. Verso NetPerformer Frame Relay Access Device ACT SDM-9200 series.
Not Vulnerable:

Verso NetPerformer Frame Relay Access Device Telnet Buffer Overflow Vulnerability

Verso NetPerformer Frame Relay Access Device (FRAD) is prone to a remotely exploitable buffer overflow in the telnet service.

A remote attacker can exploit this issue to execute arbitrary code on the affected device. Failed exploit attempts will likely crash the device, denying service to legitimate users.

Verso NetPerformer Frame Relay Access Device Telnet Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

The following proof of concept is available:

• /data/vulnerabilities/exploits/verso_netperformer_telnet_overflow.txt

Verso NetPerformer Frame Relay Access Device Telnet Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Verso NetPerformer Frame Relay Access Device Telnet Buffer Overflow Vulnerability

References:

• NetPerformer product page (Verso)
  
• Verso Homepage (Verso)
  
• NetPerformer Frame Relay Access Device (FRAD) ACT Multiple Vulnerabilit (Arif Jatmoko)