Secunia

Arif Jatmoko has reported two vulnerabilities in various NetPerformer products, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An error in the login handling in the telnet service can be exploited to crash and reboot a vulnerable device by sending an overly long username (more than 4550 characters).

2) An error in the handling of ICMP packets can be exploited to hang a vulnerable device by sending a spoofed ICMP packet to the device via a LAND attack where the source address is the same as the device address.

The vulnerabilities have been reported in the following products:
* NetPerformer SDM-95xx version 7.x (R1)
* NetPerformer SDM-93xx version 10.x (R2)
* NetPerformer SDM-92xx version 9.x (R1)

Solution
Filter traffic to the telnet service and filter ICMP packets to the device where the source address is the same as the destination address.

Provided and/or discovered by
Arif Jatmoko

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html

Deep Links
Links available in Customer Area