Secunia

Description

Nortel Networks has acknowledged some vulnerabilities in various products, which can be exploited by malicious people to cause various types of DoS (Denial of Service).

For more information:
SA14904

The following products are only partly affected:
* Application Switch is only affected on the management port.
* Ethernet Switch (BPS2000/460/470), Ethernet Switch (420/425/325), Ethernet Switch 380-24T, and Ethernet Routing Switch 5510/5520 are only affected by the ICMP Source Quench attack.
* Multiservice Switch (6000 Series, 7000 Series, 15000, and 20000) is at limited risk due to MD5 authentication in PCR 6.1 and improvements made to sequence number selection.
* Multiservice Access Switch 4400 is only affected by ICMP source quench attacks, but does not typically have high speed interfaces.
* Multiprotocol Router Family is not affected by the ICMP Source Quench attack.

Solution
Application Switch (Alteon Family):
Further details available in Customer Area

Original Advisory
Nortel Networks:
http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?level=6&category=29&subcategory=1&subtype=&DocumentOID=326515

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area