CVE-2007-2343

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-04-27 · updated 2026-06-16

Description

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names.

Affected products

Enterasys Netsight Console: through 2.1
Enterasys Netsight Inventory Manager: through 2.1

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506
http://osvdb.org/34627
http://secunia.com/advisories/24764
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
http://www.securitytracker.com/id?1017876
http://www.vupen.com/english/advisories/2007/1271
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=506
http://osvdb.org/34627
http://secunia.com/advisories/24764
http://www.enterasys.com/pub/NetSight/Patches/SP1/NetSight_SP1.pdf
http://www.securitytracker.com/id?1017876
http://www.vupen.com/english/advisories/2007/1271

Get alerted when CVE-2007-2343 or the next vulnerability affects your stack