----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
McDATA Switches / Directors Network Broadcast Storm Denial of Service

SECUNIA ADVISORY ID:
SA16295

VERIFY ADVISORY:
http://secunia.com/advisories/16295/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

OPERATING SYSTEM:
McDATA Sphereon 4300 Fabric Switch
http://secunia.com/product/5484/
McDATA Intrepid 6140 Director
http://secunia.com/product/5485/
McDATA Intrepid 6064 Director
http://secunia.com/product/5486/
McDATA Sphereon 4500 Fabric Switch
http://secunia.com/product/5483/

DESCRIPTION:
A vulnerability has been reported in McDATA Switches and Directors,
which can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerability is caused due to a failure to recover from network
broadcast storms and can be exploited to cause the switches/directors
to lose connectivity. This can lead to multiple path failures and loss
of host access to the array.

The vulnerability has been reported in the following products without
E/OS 6.0.0 or later:
* McDATA Sphereon 4300 Fabric Switch
* McDATA Sphereon 4500 Fabric Switch
* McDATA Intrepid 6064 Director Switch
* McDATA Intrepid 6140 Director Switch

SOLUTION:
Update to E/OS 6.0.0 or later (E/OS 7.01.00 in patch 119550-01 also
contains the fix).

PROVIDED AND/OR DISCOVERED BY:
Reported by vendor.

ORIGINAL ADVISORY:
Sun Microsystems:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------