日本語

CVE-2011-0454 : 詳細

CVE-2011-0454

3.86%V4
2011-03-01
22h00 +00:00
Overflow
Adjacent Network
2024-08-06
21h51 +00:00
CVE.org
NVD
特定のCVEの通知
特定のCVEの変更情報をいち早くお届けします。
通知を管理する

CVE の説明

Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.

CVE の情報

関連する弱点

CWE-ID 弱点名 出典
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

メトリクス

メトリクス スコア 深刻度 CVSS ベクター 出典
V2 8.3 AV:A/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSSは脆弱性が悪用される可能性を予測するスコアリングモデルです。

EPSSスコア

EPSSモデルは0から1（0〜100%）の確率スコアを算出します。スコアが高いほど、脆弱性が悪用される可能性が高いことを示します。

EPSSパーセンタイル

パーセンタイルはCVEをEPSSスコアで順位付けするために使用されます。例えば、EPSSスコアで95パーセンタイルにあるCVEは、他の95%のCVEよりも悪用される可能性が高いことを意味します。パーセンタイルはCVEのEPSSスコアを他のCVEと比較するために使用されます。
EPSS First.org

関連製品

構成 0

Iij>>Seil\/b1_firmware >> Version 1.00

Iij>>Seil\/b1_firmware >> Version 2.01

Iij>>Seil\/b1_firmware >> Version 2.10

Iij>>Seil\/b1_firmware >> Version 2.20

Iij>>Seil\/b1_firmware >> Version 2.30

Iij>>Seil\/b1_firmware >> Version 2.40

Iij>>Seil\/b1_firmware >> Version 2.41

Iij>>Seil\/b1_firmware >> Version 2.42

Iij>>Seil\/b1_firmware >> Version 2.50

Iij>>Seil\/b1_firmware >> Version 2.51

Iij>>Seil\/b1_firmware >> Version 2.52

Iij>>Seil\/b1_firmware >> Version 2.60

Iij>>Seil\/b1_firmware >> Version 2.61

Iij>>Seil\/b1_firmware >> Version 2.62

Iij>>Seil\/b1_firmware >> Version 2.63

Iij>>Seil\/b1_firmware >> Version 2.70

Iij>>Seil\/b1_firmware >> Version 2.72

Iij>>Seil\/b1_firmware >> Version 2.73

Iij>>Seil\/b1_firmware >> Version 2.74

Iij>>Seil\/b1_firmware >> Version 2.75

Iij>>Seil\/b1_firmware >> Version 3.01

Iij>>Seil\/b1_firmware >> Version 3.02

Iij>>Seil\/b1_firmware >> Version 3.10

Iij>>Seil\/b1_firmware >> Version 3.11

Iij>>Seil\/b1 >> Version *

構成 0

Iij>>Seil\/x1_firmware >> Version 1.00

Iij>>Seil\/x1_firmware >> Version 1.10

Iij>>Seil\/x1_firmware >> Version 1.11

Iij>>Seil\/x1_firmware >> Version 1.20

Iij>>Seil\/x1_firmware >> Version 1.21

Iij>>Seil\/x1_firmware >> Version 1.22

Iij>>Seil\/x1_firmware >> Version 1.30

Iij>>Seil\/x1_firmware >> Version 1.31

Iij>>Seil\/x1_firmware >> Version 1.32

Iij>>Seil\/x1_firmware >> Version 1.40

Iij>>Seil\/x1_firmware >> Version 1.41

Iij>>Seil\/x1_firmware >> Version 1.43

Iij>>Seil\/x1_firmware >> Version 1.44

Iij>>Seil\/x1_firmware >> Version 2.10

Iij>>Seil\/x1_firmware >> Version 2.20

Iij>>Seil\/x1_firmware >> Version 2.30

Iij>>Seil\/x1_firmware >> Version 2.40

Iij>>Seil\/x1_firmware >> Version 2.41

Iij>>Seil\/x1_firmware >> Version 2.42

Iij>>Seil\/x1_firmware >> Version 2.50

Iij>>Seil\/x1_firmware >> Version 2.51

Iij>>Seil\/x1_firmware >> Version 2.52

Iij>>Seil\/x1_firmware >> Version 2.60

Iij>>Seil\/x1_firmware >> Version 2.61

Iij>>Seil\/x1_firmware >> Version 2.62

Iij>>Seil\/x1_firmware >> Version 2.63

Iij>>Seil\/x1_firmware >> Version 2.70

Iij>>Seil\/x1_firmware >> Version 2.72

Iij>>Seil\/x1_firmware >> Version 2.73

Iij>>Seil\/x1_firmware >> Version 2.74

Iij>>Seil\/x1_firmware >> Version 2.75

Iij>>Seil\/x1_firmware >> Version 3.01

Iij>>Seil\/x1_firmware >> Version 3.02

Iij>>Seil\/x1_firmware >> Version 3.10

Iij>>Seil\/x1_firmware >> Version 3.11

Iij>>Seil\/x1 >> Version *

構成 0

Iij>>Seil\/x2_firmware >> Version 1.00

Iij>>Seil\/x2_firmware >> Version 1.10

Iij>>Seil\/x2_firmware >> Version 1.11

Iij>>Seil\/x2_firmware >> Version 1.20

Iij>>Seil\/x2_firmware >> Version 1.21

Iij>>Seil\/x2_firmware >> Version 1.22

Iij>>Seil\/x2_firmware >> Version 1.30

Iij>>Seil\/x2_firmware >> Version 1.31

Iij>>Seil\/x2_firmware >> Version 1.32

Iij>>Seil\/x2_firmware >> Version 1.40

Iij>>Seil\/x2_firmware >> Version 1.41

Iij>>Seil\/x2_firmware >> Version 1.43

Iij>>Seil\/x2_firmware >> Version 1.44

Iij>>Seil\/x2_firmware >> Version 2.10

Iij>>Seil\/x2_firmware >> Version 2.20

Iij>>Seil\/x2_firmware >> Version 2.30

Iij>>Seil\/x2_firmware >> Version 2.40

Iij>>Seil\/x2_firmware >> Version 2.41

Iij>>Seil\/x2_firmware >> Version 2.42

Iij>>Seil\/x2_firmware >> Version 2.50

Iij>>Seil\/x2_firmware >> Version 2.51

Iij>>Seil\/x2_firmware >> Version 2.52

Iij>>Seil\/x2_firmware >> Version 2.60

Iij>>Seil\/x2_firmware >> Version 2.61

Iij>>Seil\/x2_firmware >> Version 2.62

Iij>>Seil\/x2_firmware >> Version 2.63

Iij>>Seil\/x2_firmware >> Version 2.70

Iij>>Seil\/x2_firmware >> Version 2.72

Iij>>Seil\/x2_firmware >> Version 2.73

Iij>>Seil\/x2_firmware >> Version 2.74

Iij>>Seil\/x2_firmware >> Version 2.75

Iij>>Seil\/x2_firmware >> Version 3.01

Iij>>Seil\/x2_firmware >> Version 3.02

Iij>>Seil\/x2_firmware >> Version 3.10

Iij>>Seil\/x2_firmware >> Version 3.11

Iij>>Seil\/x2 >> Version *

構成 0

Iij>>Seil\/x86_firmware >> Version 1.00

Iij>>Seil\/x86_firmware >> Version 1.61

Iij>>Seil\/x86 >> Version *

構成 0

Iij>>Seil\/turbo_firmware >> Version 1.80

Iij>>Seil\/turbo_firmware >> Version 1.81

Iij>>Seil\/turbo_firmware >> Version 1.82

Iij>>Seil\/turbo_firmware >> Version 1.83

Iij>>Seil\/turbo_firmware >> Version 1.84

Iij>>Seil\/turbo_firmware >> Version 1.85

Iij>>Seil\/turbo_firmware >> Version 1.90

Iij>>Seil\/turbo_firmware >> Version 1.91

Iij>>Seil\/turbo_firmware >> Version 1.92

Iij>>Seil\/turbo_firmware >> Version 1.93

Iij>>Seil\/turbo_firmware >> Version 1.94

Iij>>Seil\/turbo_firmware >> Version 1.95

Iij>>Seil\/turbo_firmware >> Version 1.96

Iij>>Seil\/turbo_firmware >> Version 1.98

Iij>>Seil\/turbo_firmware >> Version 1.99

Iij>>Seil\/turbo_firmware >> Version 2.00

Iij>>Seil\/turbo_firmware >> Version 2.01

Iij>>Seil\/turbo_firmware >> Version 2.02

Iij>>Seil\/turbo_firmware >> Version 2.03

Iij>>Seil\/turbo_firmware >> Version 2.04

Iij>>Seil\/turbo_firmware >> Version 2.05

Iij>>Seil\/turbo_firmware >> Version 2.06

Iij>>Seil\/turbo_firmware >> Version 2.07

Iij>>Seil\/turbo_firmware >> Version 2.08

Iij>>Seil\/turbo_firmware >> Version 2.09

Iij>>Seil\/turbo_firmware >> Version 2.10

Iij>>Seil\/turbo >> Version *

構成 0

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.80

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.81

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.82

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.83

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.84

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.85

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.90

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.91

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.92

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.93

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.94

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.95

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.96

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.98

Iij>>Seil\/neu_2fe_plus_firmware >> Version 1.99

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.00

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.01

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.02

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.03

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.04

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.05

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.06

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.07

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.08

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.09

Iij>>Seil\/neu_2fe_plus_firmware >> Version 2.10

Iij>>Seil\/neu_2fe_plus >> Version *

参考資料

http://jvndb.jvn.jp/jvndb/JVNDB-2011-000014
Tags : third-party-advisory, x_refsource_JVNDB
http://jvn.jp/en/jp/JVN88991166/index.html
Tags : third-party-advisory, x_refsource_JVN
http://www.securityfocus.com/bid/46598
Tags : vdb-entry, x_refsource_BID
http://secunia.com/advisories/43494
Tags : third-party-advisory, x_refsource_SECUNIA
CVE Findに掲載されている情報は、慎重に選定された複数の参照ソースから取得されています。CVEデータはMITRE Corporationおよび国家脆弱性データベース（NVD）が提供しています。既知の悪用された脆弱性（KEV）カタログはサイバーセキュリティ・インフラセキュリティ庁（CISA）から、EPSSスコアはFIRST.orgから取得しています。また、ソフトウェアの弱点（CWE）および共通攻撃パターン（CAPEC）に関するデータはMITRE Corporationが管理し、ハードウェアおよびソフトウェア構成（CPE）に関する情報はNVDが提供しています。