3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability

Bugtraq ID:	10240
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 30 2004 12:00AM
Updated:	Apr 30 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Michael Scheidell <[email protected]>.
Vulnerable:	3Com 3Com SuperStack 3 NBX 4.2.7 3Com 3Com SuperStack 3 NBX 4.1.21 3Com 3Com SuperStack 3 NBX 4.1.4 3Com 3Com SuperStack 3 NBX 4.0.17
Not Vulnerable:

3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability

A vulnerability has been discovered in 3Com SuperStack 3 NBX IP telephones.

This issue occurs when an affected port is scanned with the Nessus security audit tool, configured in safeChecks mode. This will effectively cause the NBX Netset application to crash.

It is reported that a hard reboot is required to restore normal functionality.

3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability

This vulnerability can be exploited using Nessus security scanner.

3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

3Com SuperStack 3 NBX Netset Application Port Scan Denial of Service Vulnerability

References:

• 3com NBX IP VOIP NetSet(r) Configuration Manager (SECNAP Network Security)
  
• Support for Products (3Com)
  
• 3com NBX VOIP NetSet Denial of Service Attack ("Michael Scheidell" )