OSVDB ID: 2178 Title: Avaya Cajun Switch Negative Integer Handling Remote DoS |
Info |
|
|
Dates |
||||
|
|
Description |
Avaya Cajun switches contain a flaw with firmware versions up to and including 3.x that may allow a malicious attacker to cause a Denial of Service. The switch does not properly handle traffic to port 4000 and it may cause the switch to stop responding and eventually reset. |
Classification |
Attack Type:
Denial of Service
Impact: Loss of Availability |
Solution |
Upgrade to software version 4.0 or higher as it has been reported to have fixed the issue. If unable to upgrade then it is advised to filter access to the device so that only trusted hosts can establish TCP connections. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |