NVD

Id
59113  
Name
CVE-2006-0374  
Description
Advantage Century Telecommunication (ACT) P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which (1) might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB remote debugging ONCRPC (aka wdbrpc) on UDP 17185, (2) reflect network data using echo (TCP 7), or (3) gain access without authentication using rlogin (TCP 513).  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-01-22  
Modified Date
2008-09-05  
Seq
2006-0374  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
303833 59113 CVE-2006-0374 20060116 ACT P202S VoIP wireless phone multiple undocumented ports/services  View
303834 59113 CVE-2006-0374 16288  View
303835 59113 CVE-2006-0374 act-p202s-default-port(24149)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61453 JVNDB-2006-003719 Advantage Century Telecommunication P202S IP Phone のファームウェアにおける重要な情報を取得される脆弱性 Advantage Century Telecommunication (ACT) P202S IP Phone のファームウェアには、(1) 重要な情報を取得される、(2) echo (TCP 7) を使用してネットワークデータを反映される、または (3) rlogin (TCP 513) を使用して認証なしでアクセス権を取得される脆弱性が存在します。 CVE-2006-0374 16476 CVE-2006-0374 59113 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003719.html 2006-01-22 2013-12-26 View