VIGILANTE-2000007

2000-08-28T00:00:00
ID PACKETSTORM:22884
Type packetstorm
Reporter Vigilante
Modified 2000-08-28T00:00:00

Description

                                        
                                            `Intel Express Switch 500 series DoS  
  
Advisory Code: VIGILANTE-2000007  
  
Release Date:  
August 28, 2000  
  
Systems Affected:  
Intel Express Switch 550F  
- Firmware version 2.63  
- Firmware version 2.64  
Based on the response from Intel (quoted below), it is very likely that  
other switches from the same series are also affected.  
  
THE PROBLEM  
By sending an IP packet, either to the Intel Express 550F or a host behind  
it, with a malformed IP-header, the box crashes. To restart it, you need  
to pull the plug (the reset button also looses functionality).  
  
Vendor Status:  
Intel was contacted on the 18th of July, and on the 21st of July a beta fix  
was produced. Regression testing on the fix is not yet complete.  
  
Fix (quote from the vendor):  
"We're still working on a solution for you. Until then, I would advise that  
any reporting, from you/your company, of this issue with the 500 series  
switches MUST include a statement which indicates contacting Intel® Customer  
Support for a fix. Following this, Intel® Customer Support will send the  
patch to the customer(s).  
  
For a list of phone numbers to get in touh with us, please refer to the  
following URL: http://www.intel.com/support/9089.htm"  
  
  
Vendor URL: http://www.intel.com  
Product URL: http://www.intel.com/network/products/exp550t_f.htm  
Copyright VIGILANTe 2000-07-14  
  
Disclaimer:  
The information within this document may change without notice. Use of  
this information constitutes acceptance for use in an AS IS  
condition. There are NO warranties with regard to this information.  
In no event shall the author be liable for any consequences whatsoever  
arising out of or in connection with the use or spread of this  
information. Any use of this information lays within the user's  
responsibility.  
  
Feedback:  
Please send suggestions, updates, and comments to:  
  
VIGILANTe  
mailto: swat@vigilante.com  
http://www.vigilante.com  
  
`