VAR-200508-0211
Vulnerability from variot - Updated: 2025-04-03 22:21Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service (connectivity and array access loss) via a network broadcast storm. McDATA Sphereon 4300, and 4500 Fabric Switches, Intrepid 6064, and 6140 Director Switches are susceptible to a remote denial of service vulnerability when running E/OS versions prior to 6.0.0. This issue is due to the affected devices failing to properly handle network broadcast storms. Hosts utilizing the SAN for storage may loose complete access to the attached storage. This vulnerability allows attackers to simultaneously deny storage service to potentially numerous servers connected to a SAN. Versions of E/OS prior to 6.0.0 are affected by this vulnerability. There are unknown vulnerabilities in Sun McData switches and director4300, 4500, 6064 and 6140, and versions before E/OS 6.0.0.
Bist Du interessiert an einem neuen Job in IT-Sicherheit?
Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secunia_vacancies/
TITLE: McDATA Switches / Directors Network Broadcast Storm Denial of Service
SECUNIA ADVISORY ID: SA16295
VERIFY ADVISORY: http://secunia.com/advisories/16295/
CRITICAL: Less critical
IMPACT: DoS
WHERE:
From local network
OPERATING SYSTEM: McDATA Sphereon 4300 Fabric Switch http://secunia.com/product/5484/ McDATA Intrepid 6140 Director http://secunia.com/product/5485/ McDATA Intrepid 6064 Director http://secunia.com/product/5486/ McDATA Sphereon 4500 Fabric Switch http://secunia.com/product/5483/
DESCRIPTION: A vulnerability has been reported in McDATA Switches and Directors, which can be exploited by malicious people to cause a DoS (Denial of Service). This can lead to multiple path failures and loss of host access to the array.
PROVIDED AND/OR DISCOVERED BY: Reported by vendor.
ORIGINAL ADVISORY: Sun Microsystems: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200508-0211",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "intrepid 6064 director switch",
"scope": "eq",
"trust": 1.0,
"vendor": "mcdata",
"version": "*"
},
{
"model": "sphereon 4500 fabric switch",
"scope": "eq",
"trust": 1.0,
"vendor": "mcdata",
"version": "*"
},
{
"model": "intrepid 6140 director switch",
"scope": "eq",
"trust": 1.0,
"vendor": "mcdata",
"version": "*"
},
{
"model": "sphereon 4300 fabric switch",
"scope": "eq",
"trust": 1.0,
"vendor": "mcdata",
"version": "*"
},
{
"model": "sphereon 4300 fabric switch",
"scope": null,
"trust": 0.6,
"vendor": "mcdata",
"version": null
},
{
"model": "intrepid 6064 director switch",
"scope": null,
"trust": 0.6,
"vendor": "mcdata",
"version": null
},
{
"model": "intrepid 6140 director switch",
"scope": null,
"trust": 0.6,
"vendor": "mcdata",
"version": null
},
{
"model": "sphereon 4500 fabric switch",
"scope": null,
"trust": 0.6,
"vendor": "mcdata",
"version": null
},
{
"model": "sphereon fabric switch",
"scope": "eq",
"trust": 0.3,
"vendor": "mcdata",
"version": "4500"
},
{
"model": "sphereon fabric switch",
"scope": "eq",
"trust": 0.3,
"vendor": "mcdata",
"version": "4300"
},
{
"model": "intrepid director switch",
"scope": "eq",
"trust": 0.3,
"vendor": "mcdata",
"version": "6140"
},
{
"model": "intrepid director switch",
"scope": "eq",
"trust": 0.3,
"vendor": "mcdata",
"version": "6064"
},
{
"model": "e/os",
"scope": null,
"trust": 0.3,
"vendor": "mcdata",
"version": null
},
{
"model": "e/os",
"scope": "ne",
"trust": 0.3,
"vendor": "mcdata",
"version": "7.01.00"
},
{
"model": "e/os",
"scope": "ne",
"trust": 0.3,
"vendor": "mcdata",
"version": "6.0.0"
}
],
"sources": [
{
"db": "BID",
"id": "14475"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sun",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
}
],
"trust": 0.6
},
"cve": "CVE-2005-2487",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2005-2487",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.0,
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "VHN-13696",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2005-2487",
"trust": 1.0,
"value": "LOW"
},
{
"author": "CNNVD",
"id": "CNNVD-200508-077",
"trust": 0.6,
"value": "LOW"
},
{
"author": "VULHUB",
"id": "VHN-13696",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-13696"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unknown vulnerability in Sun McData switches and directors 4300, 4500, 6064, and 6140 before E/OS 6.0.0 may allow attackers to cause a denial of service (connectivity and array access loss) via a network broadcast storm. McDATA Sphereon 4300, and 4500 Fabric Switches, Intrepid 6064, and 6140 Director Switches are susceptible to a remote denial of service vulnerability when running E/OS versions prior to 6.0.0. This issue is due to the affected devices failing to properly handle network broadcast storms. \nHosts utilizing the SAN for storage may loose complete access to the attached storage. \nThis vulnerability allows attackers to simultaneously deny storage service to potentially numerous servers connected to a SAN. \nVersions of E/OS prior to 6.0.0 are affected by this vulnerability. There are unknown vulnerabilities in Sun McData switches and director4300, 4500, 6064 and 6140, and versions before E/OS 6.0.0. \n\n----------------------------------------------------------------------\n\nBist Du interessiert an einem neuen Job in IT-Sicherheit?\n\n\nSecunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-\nSicherheit:\nhttp://secunia.com/secunia_vacancies/\n\n----------------------------------------------------------------------\n\nTITLE:\nMcDATA Switches / Directors Network Broadcast Storm Denial of Service\n\nSECUNIA ADVISORY ID:\nSA16295\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/16295/\n\nCRITICAL:\nLess critical\n\nIMPACT:\nDoS\n\nWHERE:\n\u003eFrom local network\n\nOPERATING SYSTEM:\nMcDATA Sphereon 4300 Fabric Switch\nhttp://secunia.com/product/5484/\nMcDATA Intrepid 6140 Director\nhttp://secunia.com/product/5485/\nMcDATA Intrepid 6064 Director\nhttp://secunia.com/product/5486/\nMcDATA Sphereon 4500 Fabric Switch\nhttp://secunia.com/product/5483/\n\nDESCRIPTION:\nA vulnerability has been reported in McDATA Switches and Directors,\nwhich can be exploited by malicious people to cause a DoS (Denial of\nService). This can lead to multiple path failures and loss\nof host access to the array. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by vendor. \n\nORIGINAL ADVISORY:\nSun Microsystems:\nhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2005-2487"
},
{
"db": "BID",
"id": "14475"
},
{
"db": "VULHUB",
"id": "VHN-13696"
},
{
"db": "PACKETSTORM",
"id": "38994"
}
],
"trust": 1.35
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "14475",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "16295",
"trust": 1.8
},
{
"db": "NVD",
"id": "CVE-2005-2487",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077",
"trust": 0.7
},
{
"db": "SUNALERT",
"id": "101833",
"trust": 0.6
},
{
"db": "XF",
"id": "21706",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-13696",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "38994",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-13696"
},
{
"db": "BID",
"id": "14475"
},
{
"db": "PACKETSTORM",
"id": "38994"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"id": "VAR-200508-0211",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-13696"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:21:45.817000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.1,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-101833-1"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/14475"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/16295"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/21706"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/21706"
},
{
"trust": 0.3,
"url": "http://www.mcdata.com/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5484/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5486/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_vacancies/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/16295/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5483/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5485/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-13696"
},
{
"db": "BID",
"id": "14475"
},
{
"db": "PACKETSTORM",
"id": "38994"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-13696"
},
{
"db": "BID",
"id": "14475"
},
{
"db": "PACKETSTORM",
"id": "38994"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2005-08-07T00:00:00",
"db": "VULHUB",
"id": "VHN-13696"
},
{
"date": "2005-08-04T00:00:00",
"db": "BID",
"id": "14475"
},
{
"date": "2005-08-05T04:52:53",
"db": "PACKETSTORM",
"id": "38994"
},
{
"date": "2005-08-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"date": "2005-08-07T04:00:00",
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-13696"
},
{
"date": "2005-08-04T00:00:00",
"db": "BID",
"id": "14475"
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200508-077"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2005-2487"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "McDATA E/OS Remote Denial Of Service Vulnerability",
"sources": [
{
"db": "BID",
"id": "14475"
},
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
}
],
"trust": 0.9
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200508-077"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…