medium5.0
CVE-2012-2606
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitra…
Impact
The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bradfordnetworks | Network Sentry Appliance Software | through 5.3 |
| Bradfordnetworks | Network Sentry Appliance | Versions ns500rx, ns500x |