3Com H3C 3100 and 3600 Switches DHCP Denial of Service Vulnerability

Bugtraq ID:	43609
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 10 2010 12:00AM
Updated:	Sep 10 2010 12:00AM
Credit:	3Com
Vulnerable:	3Com H3C S3600SI-CMW310-R1702P15 0 3Com H3C S3600EI-CMW310-R1702P15 0
Not Vulnerable:	3Com H3C S3600SI-CMW310-R1702P18 0 3Com H3C S3600EI-CMW310-R1702P18 0 3Com H3C S3100EI-CMW310-R2211P06 0

3Com H3C 3100 and 3600 Switches DHCP Denial of Service Vulnerability

3Com H3C 3100 and 3600 series switches are prone to a denial-of-service vulnerability when processing specially crafted DHCP packets.

Successful exploits will cause a device to restart.

Versions prior to following are affected:

3Com H3C S3600EI-CMW310-R1702P18
3Com H3C S3100EI-CMW310-R2211P06
3Com H3C S3600SI-CMW310-R1702P18

3Com H3C 3100 and 3600 Switches DHCP Denial of Service Vulnerability

An attacker can carry out this attack using readily available tools.

3Com H3C 3100 and 3600 Switches DHCP Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for more information.

3Com H3C 3100 and 3600 Switches DHCP Denial of Service Vulnerability

References:

• 3Com Homepage (3Com)
  
• H3C S3100EI-CMW310-R2211P06 Release Notes (3Com)
  
• H3C S3600EI-CMW310-R1702P18 Release Notes (3Com)
  
• H3C S3600SI-CMW310-R1702P18 Release Notes (3Com)