Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller (SC), the system console, and possibly the host OS, and cause a denial of service (shutdown or reboot), via spoofed IP packets.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Scapp | Sun | 5.18 (including) | 5.18 (including) |
| Scapp | Sun | 5.19 (including) | 5.19 (including) |
| Scapp | Sun | 5.20.0 (including) | 5.20.0 (including) |
| Scapp | Sun | 5.20.1 (including) | 5.20.1 (including) |
| Scapp | Sun | 5.20.2 (including) | 5.20.2 (including) |
| Scapp | Sun | 5.20.3 (including) | 5.20.3 (including) |
| Scapp | Sun | 5.20.4 (including) | 5.20.4 (including) |
| Scapp | Sun | 5.20.5 (including) | 5.20.5 (including) |
| Scapp | Sun | 5.20.6 (including) | 5.20.6 (including) |
| Scapp | Sun | 5.20.7 (including) | 5.20.7 (including) |
| Scapp | Sun | 5.20.8 (including) | 5.20.8 (including) |
| Scapp | Sun | 5.20.9 (including) | 5.20.9 (including) |
| Scapp | Sun | 5.20.10 (including) | 5.20.10 (including) |
References
- http://secunia.com/advisories/33158
- http://securitytracker.com/id?1021392
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-246746-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019814.1-1
- http://www.securityfocus.com/bid/32805
- http://www.vupen.com/english/advisories/2008/3440
- http://secunia.com/advisories/33158
- http://securitytracker.com/id?1021392
- http://sunsolve.sun.com/search/document.do?assetkey=1-21-114527-12-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-246746-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1019814.1-1
- http://www.securityfocus.com/bid/32805
- http://www.vupen.com/english/advisories/2008/3440