ID CVE-2006-2078
Summary Multiple unspecified vulnerabilities in multiple FITELnet products, including FITELnet-F40, F80, F100, F120, F1000, and E20/E30, allow remote attackers to cause a denial of service via crafted DNS messages that trigger errors in (1) ProxyDNS or (2) PKI-Resolver, as demonstrated by the OUSPG PROTOS DNS test suite.
References
Vulnerable Configurations
  • cpe:2.3:h:furukawa_electric:fitelnet:e20:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:e20:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:e30:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:e30:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f40:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f40:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f80:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f80:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f100:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f100:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f120:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f120:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f1000:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f1000:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:fitelnet:f3000:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:fitelnet:f3000:*:*:*:*:*:*:*
  • cpe:2.3:h:furukawa_electric:mucho-ev_pk:*:*:*:*:*:*:*:*
    cpe:2.3:h:furukawa_electric:mucho-ev_pk:*:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 20-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 17710
cert-vn VU#955777
confirm http://www.furukawa.co.jp/fitelnet/topic/dns2_attacks.html
misc
secunia 19820
vupen
  • ADV-2006-1505
  • ADV-2006-1536
xf dns-improper-request-handling(26081)
Last major update 20-07-2017 - 01:31
Published 27-04-2006 - 22:03
Last modified 20-07-2017 - 01:31
Back to Top