certfr_avis - certa-2011-avi-608

CERTA-2011-AVI-608

Vulnerability from certfr_avis

Une vulnérabilité présente sur les produits D-Link peut être utilisée par un utilisateur malveillant pour exécuter du code arbitraire à distance.

Description

Une vulnérabilité de type débordement de tampon a été identifiée dans le serveur SSH de certains produits D-Link. Une personne malveillante peut exploiter cette vulnérabilité afin d'exécuter du code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Une mise à jour du firmware permet de corriger cette vulnérabilité. Il est aussi possible de désactiver le serveur SSH dans certains produits, si celui-ci n'est pas utilisé.

None

Impacted products

Vendor	Product	Description
N/A	N/A	D-Link séries DES-3800 firmwares antérieures au R4.50B052 ;
N/A	N/A	D-Link séries DWL-2100AP firmwares antérieures au 2.50RC548 ;
N/A	N/A	D-Link séries DWL-3200AP firmwares antérieures au 2.55RC549.

References

Title

Publication Time

Tags

Avis JVN #72640744 du 28 octobre 2011	None	vendor-advisory
Avis D-Link DL-VU-2011-001 (en japonais) :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "D-Link s\u00e9ries DES-3800 firmwares ant\u00e9rieures au R4.50B052 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "D-Link s\u00e9ries DWL-2100AP firmwares ant\u00e9rieures au 2.50RC548 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "D-Link s\u00e9ries DWL-3200AP firmwares ant\u00e9rieures au 2.55RC549.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de tampon a \u00e9t\u00e9 identifi\u00e9e dans le\nserveur SSH de certains produits D-Link. Une personne malveillante peut\nexploiter cette vuln\u00e9rabilit\u00e9 afin d\u0027ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\nUne mise \u00e0 jour du firmware permet de corriger cette vuln\u00e9rabilit\u00e9. Il\nest aussi possible de d\u00e9sactiver le serveur SSH dans certains produits,\nsi celui-ci n\u0027est pas utilis\u00e9.\n",
  "cves": [
    {
      "name": "CVE-2011-3992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3992"
    }
  ],
  "initial_release_date": "2011-10-31T00:00:00",
  "last_revision_date": "2011-10-31T00:00:00",
  "links": [
    {
      "title": "Avis D-Link DL-VU-2011-001 (en japonais) :",
      "url": "http://www.dlink-jp.com/page/sc/F/security_info20111028.html"
    }
  ],
  "reference": "CERTA-2011-AVI-608",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-10-31T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 pr\u00e9sente sur les produits D-Link peut \u00eatre utilis\u00e9e\npar un utilisateur malveillant pour ex\u00e9cuter du code arbitraire \u00e0\ndistance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits D-Link",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Avis JVN #72640744 du 28 octobre 2011",
      "url": "http://jvn.jp/en/jp/JVN72640744/index.html"
    }
  ]
}

CVE-2011-3992 (GCVE-0-2011-3992)

Vulnerability from cvelistv5

Published

2011-11-03 17:00

Modified

2024-08-06 23:53

Severity ?

CWE

Summary

Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

References

URL

Tags

	http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092	third-party-advisory, x_refsource_JVNDB
	http://osvdb.org/76628	vdb-entry, x_refsource_OSVDB
	http://www.securityfocus.com/bid/50405	vdb-entry, x_refsource_BID
	http://jvn.jp/en/jp/JVN72640744/index.html	third-party-advisory, x_refsource_JVN
	http://www.dlink-jp.com/page/sc/F/security_info20111028.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:53:32.547Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVNDB-2011-000092",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092"
          },
          {
            "name": "76628",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/76628"
          },
          {
            "name": "50405",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/50405"
          },
          {
            "name": "JVN#72640744",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN72640744/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.dlink-jp.com/page/sc/F/security_info20111028.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-10-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2012-01-27T10:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "name": "JVNDB-2011-000092",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092"
        },
        {
          "name": "76628",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/76628"
        },
        {
          "name": "50405",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/50405"
        },
        {
          "name": "JVN#72640744",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN72640744/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.dlink-jp.com/page/sc/F/security_info20111028.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2011-3992",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVNDB-2011-000092",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000092"
            },
            {
              "name": "76628",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/76628"
            },
            {
              "name": "50405",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/50405"
            },
            {
              "name": "JVN#72640744",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN72640744/index.html"
            },
            {
              "name": "http://www.dlink-jp.com/page/sc/F/security_info20111028.html",
              "refsource": "CONFIRM",
              "url": "http://www.dlink-jp.com/page/sc/F/security_info20111028.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2011-3992",
    "datePublished": "2011-11-03T17:00:00",
    "dateReserved": "2011-10-05T00:00:00",
    "dateUpdated": "2024-08-06T23:53:32.547Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTA-2011-AVI-608

Vulnerability from certfr_avis

Description

Solution

CVE-2011-3992 (GCVE-0-2011-3992)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature