3Com H3C S9500E/S12500 Switches Denial of Service Vulnerability

Bugtraq ID:	39537
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2010 12:00AM
Updated:	Feb 06 2010 12:00AM
Credit:	3Com
Vulnerable:	3Com H3C S9500E 0 3Com H3C S12500 0
Not Vulnerable:	3Com H3C S9500E-CMW520-R1230P01 0 3Com H3C S12500-CMW520-R1230P01 0

3Com H3C S9500E/S12500 Switches Denial of Service Vulnerability

3Com H3C S9500E and S12500 switches are prone to a denial-of-service vulnerability when handling specially crafted HTTP requests.

Successful exploits will cause a device to restart.

Versions prior to H3C S9500E-CMW520-R1230P01 and H3C S12500-CMW520-R1230P01 are affected.

3Com H3C S9500E/S12500 Switches Denial of Service Vulnerability

An attacker can carry out this attack using a browser or other client applications used for sending HTTP requests.

3Com H3C S9500E/S12500 Switches Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

3Com H3C S9500E/S12500 Switches Denial of Service Vulnerability

References:

• H3C S12500 Series Data Center Switches (3Com)
  
• H3C S12500-CMW520-R1230P01 Release Notes (3Com)
  
• H3C S9500E Core Routing Switch (3Com)
  
• H3C S9500E-CMW520-R1230P01 Release Notes (3Com)