CVE-2006-4773 Denial of service in n/a
Remote attackers can cause a denial of service by flooding the LAN, forcing a reboot of Sun StorEdge 6130 Array Controllers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-4773?
CVE-2006-4773 is a medium-severity denial of service vulnerability in n/a, published on 14 Sep 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.
Which versions are affected by CVE-2006-4773?
It affects 1 product.
Products include Sun Storedge 6130 Arrays.
How do I fix CVE-2006-4773?
No fix has been published for CVE-2006-4773 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2006-4773 being exploited?
There is no known exploitation of CVE-2006-4773 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2005-4885 Unspecified vulnerability on certain Sun StorEdge 6130 (SE6130) Controller Arrays allows remote attackers to delete data via unknown vectors.
- CVE-2005-1609 Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remo
Sources
Also known as GHSA-wch4-vg96-7wgw.