SEIL Multiple Products PPP Access Concentrator (PPPAC) Buffer Overflow Vulnerability

Bugtraq ID:	46598
Class:	Boundary Condition Error
CVE:	CVE-2011-0454
Remote:	Yes
Local:	No
Published:	Feb 28 2011 12:00AM
Updated:	Feb 28 2011 12:00AM
Credit:	The vendor
Vulnerable:	SEIL Turbo 2.10 SEIL Turbo 1.80 SEIL SEIL/x86 1.61 SEIL SEIL/x86 1.00 SEIL SEIL/X2 3.11 SEIL SEIL/X1 3.11 SEIL SEIL/X1 1.00 SEIL SEIL/B1 3.11 SEIL SEIL/B1 1.00 SEIL neu 2FE Plus 2.10 SEIL neu 2FE Plus 1.80
Not Vulnerable:	SEIL Turbo 2.11 SEIL SEIL/X2 3.12 SEIL SEIL/X1 3.12 SEIL SEIL/B1 3.12 SEIL neu 2FE Plus 2.11

SEIL Multiple Products PPP Access Concentrator (PPPAC) Buffer Overflow Vulnerability

Multiple SEIL products, including SEIL/x86, SEIL/B1, SEIL/X1, SEIL/X2, Turbo, and neu 2FE Plus are prone to a buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code on the affected device. Failed exploit attempts will result in a denial-of-service condition.

SEIL Multiple Products PPP Access Concentrator (PPPAC) Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SEIL Multiple Products PPP Access Concentrator (PPPAC) Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for details.

SEIL Multiple Products PPP Access Concentrator (PPPAC) Buffer Overflow Vulnerability

References:

• JVN # 88991166 SEIL Series Buffer Overflow Vulnerabilty (JVN)
  
• SEIL Homepage (Internet Initiative)
  
• SEIL Products latest firmware (Internet Initiative)