JVNDB-2009-000069

SEIL/X Series and SEIL/B1 buffer overflow vulnerability

SEIL/X Series and SEIL/B1 contain a buffer overflow vulnerability.

SEIL/X Series and SEIL/B1 are routers. SEIL/X Series and SEIL/B1 contain an issue in the processing by the URL filtering function, which may lead to a buffer overflow vulnerability.

Base Metrics: 9.3 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: Complete
• Integrity Impact: Complete
• Availability Impact: Complete

Internet Initiative Japan Inc.

• SEIL/B1 firmware 2.40 to 2.51
• SEIL/X1 firmware 2.40 to 2.51
• SEIL/X2 firmware 2.40 to 2.51

When processing a specially crafted URL, a remote attacker may be able to execute arbitrary code.

[Update the Software]
Update to the latest version according to the information provided by the developer.

Internet Initiative Japan Inc.

• IIJ : a00669.php (Japanese)

1. JVN : JVN#06362164
2. National Vulnerability Database (NVD) : CVE-2009-4292
3. Common Vulnerabilities and Exposures (CVE) : CVE-2009-4292
4. Secunia Advisory : SA37154
5. ISS X-Force Database : 54050
6. VUPEN Security : VUPEN/ADV-2009-3111
7. OPEN SOURCE VULNERABILITY DATABASE (OSVDB) : 59361
8. Common Weakness Enumeration (CWE) : Buffer Errors (CWE-119) [IPA Evaluation]

[2009/11/02]
  Web page published