Signature Detail
Short Name |
HTTP:MISC:RAS-CFG |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
3com RAS http telco superstack configuration |
Release Date |
2003/05/28 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: 3com RAS 1500 Configuration Request
This signature detects attempts to exploit a known vulnerability in 3com SuperStack II Remote Access System (RAS) 1500. Attackers can request the 3comRAS server device configuration file, decrypt the encoded password in the configuration file, and gain elevated access.
Extended Description
Successful exploitation of the vulnerability in the SuperStack II RAS 1500 router could allow a remote attacker to deny service to the router, or to obtain its configuration and system image file. A firmware update is needed to eliminate this vulnerability.
References