PT-2004-3531 · Sun · Netra 1280+2

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2641

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sun Fire 3800/4800/4810/6800 versions (affected versions not specified) Sun Fire V1280 versions (affected versions not specified) Netra 1280 versions (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a system controller hang. This is achieved by sending IP packets with Type of Service (TOS) bits set.

Recommendations For Sun Fire 3800/4800/4810/6800, consider restricting access to the system controller to minimize the risk of exploitation. For Sun Fire V1280, avoid using IP packets with Type of Service (TOS) bits set until the issue is resolved. For Netra 1280, as a temporary workaround, consider disabling the reception of IP packets with TOS bits set until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2641

Affected Products

Netra 1280

Sun Fire 3800/4800/4810/6800

Sun Fire V1280

References · 7

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1 · Patch
• http://securityfocus.com/bid/10189 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2641 · Security Note
• http://secunia.com/advisories/11439 · Vendor Advisory
• http://osvdb.org/5577 · Patch
• http://securitytracker.com/id?1009888 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15925 · Note