Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

BID:7961

Info

Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

Bugtraq ID: 7961
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Jun 18 2003 12:00AM
Updated: Jun 18 2003 12:00AM
Credit: Discovery credited to Jacek Lipkowski.
Vulnerable: Avaya G700 Media Gateway 3.0
Avaya Cajun P333 Series Firmware 3.12 .0
Avaya Cajun P330 Series Firmware 3.12.1
Avaya Cajun P330 Series Firmware 3.11
+ Avaya P330-ML
+ Avaya P330T
+ Avaya P333R
+ Avaya P333R-LB
Avaya Cajun P330 Series Firmware 3.10
+ Avaya P330-ML
+ Avaya P330T
+ Avaya P333R
+ Avaya P333R-LB
Avaya Cajun P330 Series Firmware 3.9.1
+ Avaya P330-ML
+ Avaya P330T
+ Avaya P333R
+ Avaya P333R-LB
Avaya Cajun P330 Series Firmware 3.8.2
+ Avaya P330-ML
+ Avaya P330T
+ Avaya P333R
+ Avaya P333R-LB
Avaya Cajun P330 Series Firmware 3.8.1
+ Avaya P330-ML
+ Avaya P330T
+ Avaya P333R
+ Avaya P333R-LB
Avaya Cajun P133 Series Firmware 2.6.1
Avaya Cajun P130 Series Firmware 2.9.1
+ Avaya P130
Not Vulnerable:

Discussion

Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

It has been reported that Cajun switches do not properly handle traffic to port 4000. Because of this, an attacker may be able to cause the switch to stall for period of time.

Exploit / POC

Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

No exploit is required for this vulnerability.

The following proof of concept string has been made available:

\x80dupa

Solution / Fix

Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

Solution:
Avaya has addressed this issue for the P330 in version 4.1 of the firmware. Further information can be obtained by contacting the vendor.

Avaya has released an updated advisory containing fixes for P130. Please see the advisory at the following location for more information:

http://support.avaya.com/japple/css/japple?temp.groupID=128450&temp.selectedFamily=128451&temp.selectedProduct=154235&temp.selectedBucket=126655&temp.feedbackState=askForFeedback&temp.documentID=214749&PAGE=avaya.css.CSSLvl1Detail&executeTransaction=avaya.css.UsageUpdate()


Avaya Cajun P133 Series Firmware 2.6.1

Avaya Cajun P130 Series Firmware 2.9.1

Avaya Cajun P330 Series Firmware 3.10

Avaya Cajun P330 Series Firmware 3.11

Avaya Cajun P333 Series Firmware 3.12 .0

Avaya Cajun P330 Series Firmware 3.12.1

Avaya Cajun P330 Series Firmware 3.8.1

Avaya Cajun P330 Series Firmware 3.8.2

Avaya Cajun P330 Series Firmware 3.9.1

References

Avaya Cajun Network Switch Connection Stalling Denial Of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report