ID CVE-2001-0740
Summary 3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of "%s" strings, possibly triggering a format string vulnerability.
References
Vulnerable Configurations
  • cpe:2.3:h:3com:3c840-us:-:*:*:*:*:*:*:*
    cpe:2.3:h:3com:3c840-us:-:*:*:*:*:*:*:*
  • cpe:2.3:h:3com:3cp4144:-:*:*:*:*:*:*:*
    cpe:2.3:h:3com:3cp4144:-:*:*:*:*:*:*:*
  • cpe:2.3:h:3com:3cp4144:1.1.7:*:*:*:*:*:*:*
    cpe:2.3:h:3com:3cp4144:1.1.7:*:*:*:*:*:*:*
  • cpe:2.3:h:3com:3cp4144:1.1.9:*:*:*:*:*:*:*
    cpe:2.3:h:3com:3cp4144:1.1.9:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 10-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 2721
bugtraq
  • 20010515 3COM OfficeConnect DSL router vulneratibilities
  • 20010921 3Com OfficeConnect 812/840 Router DoS exploit code
  • 20010924 Regarding: 3Com OfficeConnect 812/840 Router DoS exploit code
xf 3com-officeconnect-http-dos(6573)
Last major update 10-10-2017 - 01:29
Published 18-10-2001 - 04:00
Last modified 10-10-2017 - 01:29
Back to Top