McDATA E/OS Remote Denial Of Service Vulnerability
BID:14475
Info
McDATA E/OS Remote Denial Of Service Vulnerability
| Bugtraq ID: | 14475 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 04 2005 12:00AM |
| Updated: | Aug 04 2005 12:00AM |
| Credit: | This issue was reported by the vendor. |
| Vulnerable: |
McDATA Sphereon Fabric Switch 4500 McDATA Sphereon Fabric Switch 4300 McDATA Intrepid Director Switch 6140 McDATA Intrepid Director Switch 6064 McDATA E/OS |
| Not Vulnerable: |
McDATA E/OS 7.0 1.00 McDATA E/OS 6.0 .0 |
Discussion
McDATA E/OS Remote Denial Of Service Vulnerability
McDATA Sphereon 4300, and 4500 Fabric Switches, Intrepid 6064, and 6140 Director Switches are susceptible to a remote denial of service vulnerability when running E/OS versions prior to 6.0.0. This issue is due to the affected devices failing to properly handle network broadcast storms.
Hosts utilizing the SAN for storage may loose complete access to the attached storage.
This vulnerability allows attackers to simultaneously deny storage service to potentially numerous servers connected to a SAN.
Versions of E/OS prior to 6.0.0 are affected by this vulnerability.
McDATA Sphereon 4300, and 4500 Fabric Switches, Intrepid 6064, and 6140 Director Switches are susceptible to a remote denial of service vulnerability when running E/OS versions prior to 6.0.0. This issue is due to the affected devices failing to properly handle network broadcast storms.
Hosts utilizing the SAN for storage may loose complete access to the attached storage.
This vulnerability allows attackers to simultaneously deny storage service to potentially numerous servers connected to a SAN.
Versions of E/OS prior to 6.0.0 are affected by this vulnerability.
Exploit / POC
McDATA E/OS Remote Denial Of Service Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
McDATA E/OS Remote Denial Of Service Vulnerability
Solution:
The vendor has released version 6.0.0 of E/OS to address this issue. Users of affected packages should contact the vendor for further information on obtaining fixes.
Sun has released Sun Alert ID 101833, along with a patch to address this issue. Please see the referenced alert for further information.
McDATA E/OS
Solution:
The vendor has released version 6.0.0 of E/OS to address this issue. Users of affected packages should contact the vendor for further information on obtaining fixes.
Sun has released Sun Alert ID 101833, along with a patch to address this issue. Please see the referenced alert for further information.
McDATA E/OS
References
McDATA E/OS Remote Denial Of Service Vulnerability
References:
References:
- McDATA Home Page (McDATA)
- Sun Alert ID: 101833 (Sun)