Enterasys SSR8000 SmartSwitch Port Scan Denial Of Service Vulnerability
BID:5703
Info
Enterasys SSR8000 SmartSwitch Port Scan Denial Of Service Vulnerability
| Bugtraq ID: | 5703 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2002-1501 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Vulnerability discovery credited to Mella Marco <[email protected]>. |
| Vulnerable: |
Enterasys SmartSwitch SSR8000 E8.3.0.4 Enterasys SmartSwitch SSR8000 E8.2.0.0 |
| Not Vulnerable: | |
Discussion
Enterasys SSR8000 SmartSwitch Port Scan Denial Of Service Vulnerability
The SSR8000 is a SmartSwitch distributed and maintained by Enterasys.
It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TCP traffic, and scanned on certain ports, the switch becomes unstable. It has been reported that this can be reproduced consistently to cause the switch to crash.
The SSR8000 is a SmartSwitch distributed and maintained by Enterasys.
It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TCP traffic, and scanned on certain ports, the switch becomes unstable. It has been reported that this can be reproduced consistently to cause the switch to crash.
Solution / Fix
Enterasys SSR8000 SmartSwitch Port Scan Denial Of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.