PT-2007-7219 · Sun · Sun Extended System Control Facility (Xscf) Control Package

Published 2007-12-15 · Updated 2017-08-08 · CVE-2007-6360

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware versions prior to 1050

Description The issue allows remote attackers to cause a denial of service, resulting in a system reboot. This can be triggered by memory exhaustion through network traffic via telnet, ssh, or http.

Recommendations For versions prior to 1050, update the firmware to version 1050 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-6360

Affected Products

Sun Extended System Control Facility (Xscf) Control Package

References · 11

• http://securityfocus.com/bid/26712 · Patch
• http://secunia.com/advisories/27926 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201333-1 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103159-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6360 · Security Note
• http://osvdb.org/40842 · Note
• http://vupen.com/english/advisories/2007/4098 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38860 · Note
• http://securitytracker.com/id?1019048 · Note
• http://osvdb.org/40844 · Note
• http://osvdb.org/40843 · Note