26 Oct
2005
26 Oct
'05
9:08 a.m.
Hi, Could anyone with ISCSI experience comment on this article?
- Technical Description *
A vulnerability has been identified in Network Appliance Data ONTAP, which could be exploited by remote attackers to bypass the authentication mechanism. This flaw is due to an error when processing specially crafted iSCSI requests, which could be exploited by remote attackers to bypass the authentication procedure and gain unauthorized access to a vulnerable application.
- Affected Products *
Network Appliance Data ONTAP version 6.4 Network Appliance Data ONTAP version 6.5 Network Appliance Data ONTAP version 7.0
- Solution *
Upgrade to version 7.0.2 :
http://www.frsirt.com/english/advisories/2005/2193
Thanks and Regards, Hannu