CVE-2005-2984

Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to the server via SSH and using the connect command to access the serial port.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2005-09-20

Last modified

2024-08-07

Affected products

• Avocent (Data Center Resources)

References

• http://drwetter.org/cs-probs/avocent-sshbug.txt
• http://marc.info/?l=bugtraq&m=112680615103315&w=2
• http://secunia.com/advisories/16836/
• http://www.securityfocus.com/bid/14853
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22302