CVE-2004-1663 Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of servi...
MediumCVSS 5.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Brocade silkworm | = 3200 | No fix listed |
| Brocade silkworm | = 3250 | No fix listed |
| Brocade silkworm | = 3800 | No fix listed |
| Brocade silkworm | = 3850 | No fix listed |
| Brocade silkworm | = 3900 | No fix listed |
| Brocade silkworm fiber channel switch | = 2010 | No fix listed |
| Brocade silkworm fiber channel switch | = 2040 | No fix listed |
| Brocade silkworm fiber channel switch | = 2050 | No fix listed |
| engenio storage controller | = 2822 | No fix listed |
| engenio storage controller | = 2882 | No fix listed |
| engenio storage controller | = 4884 | No fix listed |
| engenio storage controller | = 5884 | No fix listed |
| ibm ds4100 | All versions | No fix listed |
| storagetek d280 | All versions | No fix listed |
| broadcom fabric operating system | = 2.1.2 | No fix listed |
| broadcom fabric operating system | = 2.2 | No fix listed |
| broadcom fabric operating system | = 3.1 | No fix listed |
References
- 20040904 Engenio/LSI Logic controllers denial of service/data corruption mailing-list
- 12464 third-party-advisory vendor-advisory
- 11108 vdb-entry vendor-advisory
- engenio-controller-tcp-dos(17290) vdb-entry