Inkra 1504GX Remote Denial Of Service Vulnerability
BID:11178
Info
Inkra 1504GX Remote Denial Of Service Vulnerability
| Bugtraq ID: | 11178 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 14 2004 12:00AM |
| Updated: | Sep 14 2004 12:00AM |
| Credit: | felix zhou <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Inkra Networks 1504GX Virtual Service Switch VSM 2.1.4.b003 |
| Not Vulnerable: | |
Discussion
Inkra 1504GX Remote Denial Of Service Vulnerability
It is reported that the Inkra 1504GX is susceptible to a denial of service vulnerability.
This vulnerability presents itself when the device receives particular malformed IP packets. The switch must be configured in a particular state for this vulnerability to be exploited.
This vulnerability allows a remote attacker to crash affected devices, denying service to legitimate users.
Inkra 1504GX routers with VSM release 2.1.4.b003 is reportedly vulnerable to this issue. Other versions are also likely affected.
It is reported that the Inkra 1504GX is susceptible to a denial of service vulnerability.
This vulnerability presents itself when the device receives particular malformed IP packets. The switch must be configured in a particular state for this vulnerability to be exploited.
This vulnerability allows a remote attacker to crash affected devices, denying service to legitimate users.
Inkra 1504GX routers with VSM release 2.1.4.b003 is reportedly vulnerable to this issue. Other versions are also likely affected.
Exploit / POC
Inkra 1504GX Remote Denial Of Service Vulnerability
An exploit is not required. Please see the attached message reference for the contents of an IP packet reportedly sufficient to exploit this vulnerability.
An exploit is not required. Please see the attached message reference for the contents of an IP packet reportedly sufficient to exploit this vulnerability.
Solution / Fix
Inkra 1504GX Remote Denial Of Service Vulnerability
Solution:
The vendor has released an update to address this vulnerability. Customers are advised to contact the vendor <[email protected]> for further information in regard to obtaining and applying an appropriate patch.
Solution:
The vendor has released an update to address this vulnerability. Customers are advised to contact the vendor <[email protected]> for further information in regard to obtaining and applying an appropriate patch.
References
Inkra 1504GX Remote Denial Of Service Vulnerability
References:
References:
- Inkra 1500 Virtual Service Switch Home Page (Inkra Networks)