3Com SuperStack Switch Web Interface Denial Of Service Vulnerability

Bugtraq ID:	10601
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 24 2004 12:00AM
Updated:	Jun 24 2004 12:00AM
Credit:	The individual responsible for discovery of this issue is currently unknown; the vendor disclosed this issue.
Vulnerable:	3Com SuperStack 3 Switch 4400.0 SE 3Com SuperStack 3 Switch 4400.0 PWR 3Com SuperStack 3 Switch 4400.0 FX 3Com SuperStack 3 Switch 4400.0 3Com SuperStack 3 Switch
Not Vulnerable:

3Com SuperStack Switch Web Interface Denial Of Service Vulnerability

It has been reported that 3Com SuperStack switches are affected by a denial of service vulnerability. This issue arises due to a failure of the device to handle exceptional input.

This issue will allow an attacker to cause the affected device to reset, denying service to legitimate users.

3Com SuperStack Switch Web Interface Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

3Com SuperStack Switch Web Interface Denial Of Service Vulnerability

Solution:
3Com has released updated firmware dealing with this issue. Please see the attached web reference and contact the vendor for details on obtaining the firmware solution.

3Com SuperStack Switch Web Interface Denial Of Service Vulnerability

References:

• 3Com Homepage (3Com)
  
• Software Updates Download Page (3Com)