Broadcom NetXtreme ASF Packet Handling Remote Code Execution Vulnerability

Bugtraq ID:	38759
Class:	Boundary Condition Error
CVE:	CVE-2010-0104
Remote:	Yes
Local:	No
Published:	Mar 15 2010 12:00AM
Updated:	May 18 2010 05:02PM
Credit:	Loïc Duflot and Yves-Alexis Perez
Vulnerable:	HP Workstation z800 HP Workstation z600 HP Workstation z400 HP Workstation xw8600 HP Workstation xw8400 HP Workstation xw6600 HP Workstation xw6400 HP Workstation xw6200 HP Workstation xw4600 HP Workstation xw4550 HP Workstation xw4400 HP Workstation xw4300 HP Workstation xw4200 HP Workstation xw3400 HP Workstation XW 4100 HP rp5700 Point of Sale System 8.04 HP rp5700 Point of Sale 0 HP rp5700 Desktop PC 8.04 HP rp5700 Business Desktop 0 HP rp3000 Point of Sale System 8.04 HP Compaq dx7200 Microtower PC 8.04 HP Compaq dx7200 Microtower 0 HP Compaq dc7600 Ultra-slim Desktop PC 8.04 HP Compaq dc7600 Small Form Factor PC 8.04 HP Compaq dc7600 Small Form Factor 0 HP Compaq dc7600 Microtower 0 HP Compaq dc7600 Convertible Minitower PC 8.04 HP Compaq dc7600 Convertible 0 HP Compaq dc5850 Small Form Factor PC 8.04 HP Compaq dc5850 Small Form Factor 0 HP Compaq dc5850 Microtower PC 8.04 HP Compaq dc5850 Microtower 0 HP Compaq dc5750 Small Form Factor PC 8.04 HP Compaq dc5750 Small Form Factor 0 HP Compaq dc5750 Microtower PC 8.04 HP Compaq dc5750 Microtower 0 HP Compaq dc5700 Small Form Factor PC 8.04 HP Compaq dc5700 Small Form Factor 0 HP Compaq dc5700 Microtower PC 8.04 HP Compaq dc5700 Microtower 0 HP Compaq 6005 Pro Small Form Factor PC 1.24 .9 HP Compaq 6005 Pro Small Form Factor PC 0 HP Compaq 6005 Pro Microtower PC 1.24 .9 HP Compaq 6005 Pro Microtower PC 0 Broadcom NetXtreme BCM5787 8.04 Broadcom NetXtreme BCM57760 8.07 Broadcom NetXtreme BCM5764 8.04 Broadcom NetXtreme BCM5761 1.24 9 Broadcom NetXtreme BCM5756 8.04 Broadcom NetXtreme BCM5755 8.04 Broadcom NetXtreme BCM5754 8.04 Broadcom NetXtreme BCM5753 8.04 Broadcom NetXtreme BCM5752 8.04 Broadcom NetXtreme BCM5751 8.04
Not Vulnerable:	HP rp5700 Point of Sale System 8.08 HP rp5700 Desktop PC 8.08 HP rp3000 Point of Sale System 8.08 HP Compaq dx7200 Microtower PC 8.08 HP Compaq dc7600 Ultra-slim Desktop PC 8.08 HP Compaq dc7600 Small Form Factor PC 8.08 HP Compaq dc7600 Convertible Minitower PC 8.08 HP Compaq dc5850 Small Form Factor PC 8.08 HP Compaq dc5850 Microtower PC 8.08 HP Compaq dc5750 Small Form Factor PC 8.08 HP Compaq dc5750 Microtower PC 8.08 HP Compaq dc5700 Small Form Factor PC 8.08 HP Compaq dc5700 Microtower PC 8.08 HP Compaq 6005 Pro Small Form Factor PC 1.40 .0 HP Compaq 6005 Pro Microtower PC 1.40 .0

Broadcom NetXtreme ASF Packet Handling Remote Code Execution Vulnerability

Broadcom NetXtreme devices are prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code with administrative privileges, resulting in a complete compromise of the affected computer.

The following versions are vulnerable:

- BCM5751, BCM5752, BCM5753, BCM5754, BCM5755, BCM5756, BCM5764, and BCM5787 with firmware version 8.04
- BCM57760 with firmware version 8.07
- BCM5761 with firmware version 1.24.0.9

Broadcom NetXtreme ASF Packet Handling Remote Code Execution Vulnerability

References:

• Can you still trust your network card ? (ANSSI)
  
• Can you still trust your network card? (Loïc Duflot, Yves-Alexis Perez, Guillaume Valadon, Olivier Levillain)
  
• Micro News Homepage (phptoys)
  
• NetXtreme (Broadcom)
  
• Vulnerability Note VU#512705 (US-CERT)