CVE-1999-1389
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
11/05/1998
Last modified:
18/10/2016
Description
US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:h:3com:total_control_netserver_card:*:*:*:*:*:*:*:* | 3.7.24 (including) |
To consult the complete list of CPE names with products and versions, see this page