ALAXALA Networks AX Series BGP UPDATE Message Processing Denial of Service - Advisories

ALAXALA Networks AX Series BGP UPDATE Message Processing Denial of Service

Secunia Advisory:	SA30054
Release Date:	2008-05-02

Critical:	Moderately critical
Impact:	DoS
Where:	From remote
Solution Status:	Unpatched

OS:	ALAXALA Networks AX2000R Series ALAXALA Networks AX2400S Series ALAXALA Networks AX3600S Series ALAXALA Networks AX5400S Series ALAXALA Networks AX7700R ALAXALA Networks AX7800R Series ALAXALA Networks AX7800S Series


CVE reference:	CVE-2007-6372 (Secunia mirror)

	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description: A vulnerability has been reported in ALAXALA Networks AX series, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error when processing BGP UPDATE messages and can be exploited to cause BGP session flapping via specially crafted BGP messages. Solution: Restrict network access on affected systems. Provided and/or discovered by: Reported via US-CERT. Original Advisory: US-CERT VU#929656: http://www.kb.cert.org/vuls/id/929656



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1 Related Secunia Security Advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Internet Explorer "DisableCaching OfSSLPages" Weakness

2.	Microsoft Windows CE Image Processing Vulnerabilities

3.	Gentoo ltsp Multiple Vulnerabilities

4.	Red Hat Directory Server Regular Expression Handler Buffer Overflow

5.	Fedora update for thunderbird

6.	Sun Solaris Print Service Unspecified Vulnerabilities

7.	SUSE Update for Multiple Packages

8.	Joomla DatsoGallery Component "sub_votepic.ph p" SQL Injection

9.	Pngcrush libpng Unknown Chunk Processing Uninitialized Memory Access

10.	Fedora update for zoneminder