Arris Cadant C3 CTMS IP Packet Denial Of Service Vulnerability

Bugtraq ID:	24430
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-2796
Remote:	Yes
Local:	No
Published:	Jun 11 2007 12:00AM
Updated:	Jun 13 2007 05:49AM
Credit:	The reporter of this issue wishes to remain anonymous.
Vulnerable:	ARRIS Cadant C3 CMTS 0
Not Vulnerable:

Arris Cadant C3 CTMS IP Packet Denial Of Service Vulnerability

Arris Cadant C3 CMTS is prone to a denial-of-service vulnerability because it fails to adequately handle malformed IP packets.

An attacker can exploit this issue to crash the affected device, denying service to legitimate users.

Arris Cadant C3 CTMS IP Packet Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Arris Cadant C3 CTMS IP Packet Denial Of Service Vulnerability

Solution:
The vendor released an update to address this issue. Please contact the vendor for information on how to obtain and apply this update.

Arris Cadant C3 CTMS IP Packet Denial Of Service Vulnerability

References:

• Cadant C3 CMTS Homepage (ARRIS)
  
• ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability (Zero Day Initiative)
  
• ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability (ZDI)