CVE-2005-1670

Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands.

CVSS v2.0 4.6 MEDIUM

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/15438	Third Party Advisory
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp	Vendor Advisory
http://www.kb.cert.org/vuls/id/937838	Patch Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2005/0572	Permissions Required Third Party Advisory
http://secunia.com/advisories/15438	Third Party Advisory
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp	Vendor Advisory
http://www.kb.cert.org/vuls/id/937838	Patch Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2005/0572	Permissions Required Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:extremenetworks:extremeware_xos::::::::
	cpe:2.3:o:extremenetworks:extremeware_xos::::::::
	cpe:2.3:o:extremenetworks:extremeware_xos::::::::

OR	cpe:2.3:h:extremenetworks:blackdiamond_10808::::::::
	cpe:2.3:h:extremenetworks:blackdiamond_8800::::::::

History

No history.

Information

Published : 2005-05-19 04:00

Updated : 2025-04-03 01:03

NVD link : CVE-2005-1670

Mitre link : CVE-2005-1670

CVE.ORG link : CVE-2005-1670

JSON object : View

Products Affected

extremenetworks

blackdiamond_8800
blackdiamond_10808
extremeware_xos

CWE

NVD-CWE-Other

{"id": "CVE-2005-1670", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-05-19T04:00:00.000", "references": [{"url": "http://secunia.com/advisories/15438", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/937838", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2005/0572", "tags": ["Permissions Required", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/15438", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kb.cert.org/vuls/id/937838", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2005/0572", "tags": ["Permissions Required", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands."}], "lastModified": "2025-04-03T01:03:51.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BA7B2D6-8210-401D-9919-28EF4DC75991", "versionEndIncluding": "10.1", "versionStartIncluding": "10.0"}, {"criteria": "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "234C1CBB-BA61-41C3-9509-75BE323310D9", "versionEndExcluding": "11.0.2.4", "versionStartIncluding": "11.0"}, {"criteria": "cpe:2.3:o:extremenetworks:extremeware_xos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E24F66-409C-42D3-AC8A-7607B9AE7B4C", "versionEndExcluding": "11.1.3.3", "versionStartIncluding": "11.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:extremenetworks:blackdiamond_10808:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14654E85-CC6C-474B-B133-0B8997EC1F5E"}, {"criteria": "cpe:2.3:h:extremenetworks:blackdiamond_8800:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6B0F2DF8-A86F-4673-9FB1-79C9CD914B4E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}