IBM Network Appliance Data ONTAP Security Restriction Bypass Vulnerability

Bugtraq ID:	18951
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 12 2006 12:00AM
Updated:	Jul 17 2006 04:13PM
Credit:	The vendor reported this vulnerability.
Vulnerable:	IBM Network Appliance Data ONTAP 7.1 + Sun Solaris 2.6 IBM Network Appliance Data ONTAP 7.0 + Sun Solaris 2.6
Not Vulnerable:

IBM Network Appliance Data ONTAP Security Restriction Bypass Vulnerability

The IBM Data ONTAP operating system is prone to a security-bypass vulnerability that may permit information disclosure.

Little is known with regards to this vulnerability; this BID will be updated when information becomes available.

It is conjectured that attackers may be able to execute SNMP-related commands, allowing them to gain access to potentially sensitive information.

Versions of IBM Data ONTAP in the 7.1 and 7.1.0.1 series, prior to version 7.1.1 are vulnerable to this issue.

IBM Network Appliance Data ONTAP Security Restriction Bypass Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM Network Appliance Data ONTAP Security Restriction Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

IBM Network Appliance Data ONTAP Security Restriction Bypass Vulnerability

References:

• Data ONTAP for IBM System Storage N series (IBM)
  
• IBM Homepage (IBM)