CVE-1999-1389

US Robotics/3Com Total Control Chassis with Frame Relay between 3.6.22 and 3.7.24 does not properly enforce access filters when the "set host prompt" setting is made for a port, which allows attackers to bypass restrictions by providing the hostname twice at the "host: " prompt.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

1998-05-11

Last modified

2024-08-01

Affected products

• Total Control Netserver Card (3com)

References

• http://marc.info/?l=bugtraq&m=90221101925916&w=2
• http://www.securityfocus.com/bid/99