Buffer overflow in Iij Seil\/b1
CVE-2011-0454
Buffer overflow in the PPP Access Concentrator (PPPAC) on the SEIL/x86 with firmware 1.00 through 1.61, SEIL/B1 with firmware 1.00 through 3.11, SEIL/X1 with firmware 1.00 through 3.11, SEIL/X2 with firmware 1.00 through 3.11, SEIL/Turbo with firmware 1.80 through 2.10, and SEIL/neu 2FE Plus with firmware 1.80 through 2.10 might allow remote attackers to execute arbitrary code via a PPPoE packet.
Vulnerability class: Buffer Overflow
EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.
Affected products
- Iij Seil\/b1
- Iij Seil\/b1_firmware — versions 1.00, 2.01, 2.10
- Iij Seil\/neu_2fe_plus
- Iij Seil\/neu_2fe_plus_firmware — versions 1.80, 1.81, 1.82
- Iij Seil\/turbo
- Iij Seil\/turbo_firmware — versions 1.80, 1.81, 1.82
- Iij Seil\/x1
- Iij Seil\/x1_firmware — versions 1.00, 1.10, 1.11
- Iij Seil\/x2
- Iij Seil\/x2_firmware — versions 1.00, 1.10, 1.11
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_XF)