[lemma=□] □ □
[lemma=this] □ □
Successful exploitation of this vulnerability allows an attacker with a valid administrator username to gain access to the CSAMC application with the role privileges of the compromised administrator account . In order to exploit this vulnerability the attacker must be on the same network segment as the concentrator without any routers in between . Using this vulnerability the root owned process can be debugged and controlled . As any packet type can be used to trigger this vulnerability the care must be taken when implementing a workaround to account for a spoofed packet . As a true BGP speaker is able to close a connection at any time , this vulnerability represents an additional risk only when the source is not the configured BGP peer , i.e ., it presents no additional risk from BGP speakers . Since this vulnerability allows for the type of attack that can completely bypass the real / original web server , there are no technical countermeasures which providers of web services could deploy at their sites . In order to exploit this vulnerability the adversary must be able to establish a TCP connection to CAS . Successful exploitation of this vulnerability allows attackers to create or append to arbitrary files . Successful exploitation of this vulnerability allows attackers to viewand delete mail from any user on the system . Since this vulnerability operates on a TCP layer , encryption does not provide any protection . This vulnerability argues for high visibility ( which the Standards Action and IETF Consensus processes ensure ) for the assignments whenever possible .