ID CVE-2006-5873
Summary Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet.
References
Vulnerable Configurations
  • cpe:2.3:a:l2tpns:l2tpns:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:l2tpns:l2tpns:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:l2tpns:l2tpns:2.0.13:*:*:*:*:*:*:*
    cpe:2.3:a:l2tpns:l2tpns:2.0.13:*:*:*:*:*:*:*
  • cpe:2.3:a:l2tpns:l2tpns:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:l2tpns:l2tpns:2.1:*:*:*:*:*:*:*
  • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
    cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 20-07-2017 - 01:34)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 21443
confirm
debian DSA-1230
secunia
  • 23230
  • 23333
vupen ADV-2006-4860
xf l2tpns-heartbeat-dos(30732)
Last major update 20-07-2017 - 01:34
Published 12-12-2006 - 00:28
Last modified 20-07-2017 - 01:34
Back to Top