Verso NetPerformer Frame Relay Access Device ICMP Denial of Service Vulnerability

Bugtraq ID:	19990
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 13 2006 12:00AM
Updated:	Sep 13 2006 11:57PM
Credit:	Arif Jatmoko discovered this issue.
Vulnerable:	Verso NetPerformer Frame Relay Access Device ACT SDM-9500 series. Verso NetPerformer Frame Relay Access Device ACT SDM-9300 series. Verso NetPerformer Frame Relay Access Device ACT SDM-9200 series.
Not Vulnerable:

Verso NetPerformer Frame Relay Access Device ICMP Denial of Service Vulnerability

Verso NetPerformer Frame Relay Access Device (FRAD) is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue to potentially crash the affected device, denying service to legitimate users. The atttacker may be able to terminate current TCP sessions being handled by the device, potentially without incurring a reboot.

Verso NetPerformer Frame Relay Access Device ICMP Denial of Service Vulnerability

An exploit is not necessarily required. Most conventional packet-crafting applications can manufacture LAND-style packets.

Verso NetPerformer Frame Relay Access Device ICMP Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Verso NetPerformer Frame Relay Access Device ICMP Denial of Service Vulnerability

References:

• CERT® Advisory CA-1997-28 IP Denial-of-Service Attacks (CERT Coordination Center)
  
• NetPerformer product page (Verso)
  
• Verso Homepage (Verso)
  
• NetPerformer Frame Relay Access Device (FRAD) ACT Multiple Vulnerabilit (Arif Jatmoko)