Security Bulletin: IBM Switches flood Fibre Channel-over-Ethernet (FCoE) data frame out of every port if destination address is not in MAC table (CVE-2013-0570)

Abstract IBM System Networking switches that are capable of Fibre Channel over Ethernet FCoE will flood FCoE data frames with unknown MAC addresses to all ports on the switch. Remediation for this vulnerability consists of updating the IBM Networking Operating System NOS running on these switches...

CVE-2013-0570

CVE-2013-0570 involves IBM System Networking and Blade Network Technology (BNT) switches with Fibre Channel over Ethernet (FCoE). The vulnerability causes floods of FCoE frames with unknown MAC addresses to all ports on the same VLAN, potentially exposing confidential data to eavesdroppers on the...