3Com TippingPoint IPS Remote Unspecified Denial Of Service Vulnerability

Bugtraq ID:	16299
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jan 16 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	The original discoverer of this issue is currently unknown.
Vulnerable:	3Com TippingPoint IPS TOS 0
Not Vulnerable:	3Com TippingPoint IPS TOS 2.2.1 .6506 3Com TippingPoint IPS TOS 2.1.4 .6324

3Com TippingPoint IPS Remote Unspecified Denial Of Service Vulnerability

3Com TippingPoint IPS is susceptible to a remote denial of service vulnerability. This issue is reportedly due to certain unspecified, malformed traffic that results in a denial of service condition.

This issue allows remote attackers to consume excessive CPU resources on affected devices. It is reported that this issue may result in the crash of the device, denying further network services to legitimate users. The vendor states that this issue results in excessive CPU resource utilization.

Further details are unavailable at this time. This record will be updates as further information is disclosed.

3Com TippingPoint IPS Remote Unspecified Denial Of Service Vulnerability

An exploit is not required.

3Com TippingPoint IPS Remote Unspecified Denial Of Service Vulnerability

Solution:
The vendor has released fixed versions of the affected device's firmware operating system. Users of affected packages are urged to contact the vendor for information on obtaining fixes.

3Com TippingPoint IPS Remote Unspecified Denial Of Service Vulnerability

References:

• TippingPoint IPS DoS (High CPU load) (SANS Institute)
  
• TippingPoint IPS Product Page (3Com)
  
• TippingPoint Support Page (3Com)
  
• Web Attack Crashes TippingPoint IPS (Eweek)