Sun has acknowledged a vulnerability in Sun StorageTek 3510 FC Array, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error within the FTP service, which can be exploited to render the array unresponsive to data services.

Successful exploitation requires that the attacker has access to the management network to which the array's management Ethernet interface is connected to.

The vulnerability is reported in firmware versions prior to 4.21.

Solution
Update to firmware 4.21, delivered in patch 113723-18 or later.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103106-1

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers