VAR-200710-0417
Vulnerability from variot - Updated: 2025-04-10 23:23Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors. Remote attackers may exploit this issue to deny service to legitimate users. Sun StorEdge 3510 FC Array with firmware version 4.21 is affected. If the above vulnerability is present, hosts requesting I/O services from the affected array may report I/O request timeouts and eventually go offline from the array, and a message similar to the following may appear in the array event log: Tue Jan 24 14:03: 06 2007 [Primary] Warning Memory Not Sufficient to Fully Support Current Config ...
Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure.
The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,700 different Windows applications.
Successful exploitation requires that the attacker has access to the management network to which the array's management Ethernet interface is connected to.
The vulnerability is reported in firmware versions prior to 4.21.
SOLUTION: Update to firmware 4.21, delivered in patch 113723-18 or later.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: http://sunsolve.sun.com/search/document.do?assetkey=1-26-103106-1
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200710-0417",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "storedge",
"scope": "eq",
"trust": 1.0,
"vendor": "sun",
"version": "*"
},
{
"model": "storagetek 3510",
"scope": "eq",
"trust": 1.0,
"vendor": "sun",
"version": "*"
},
{
"model": "storagetek 3510",
"scope": "lt",
"trust": 0.8,
"vendor": "sun microsystems",
"version": "firmware 4.21"
},
{
"model": "storedge",
"scope": "lt",
"trust": 0.8,
"vendor": "sun microsystems",
"version": "firmware 4.21"
},
{
"model": "storedge",
"scope": "eq",
"trust": 0.6,
"vendor": "sun",
"version": "firmware_4.20"
},
{
"model": "storagetek 3510",
"scope": "eq",
"trust": 0.6,
"vendor": "sun",
"version": "firmware_4.20"
},
{
"model": "storedge fc array",
"scope": "eq",
"trust": 0.3,
"vendor": "sun",
"version": "3510"
}
],
"sources": [
{
"db": "BID",
"id": "26086"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:sun:storagetek_3510",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sun:storedge",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sun Alert Notification",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
}
],
"trust": 0.6
},
"cve": "CVE-2007-5482",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2007-5482",
"impactScore": 4.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-28844",
"impactScore": 4.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-5482",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2007-5482",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200710-311",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-28844",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-28844"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors. Remote attackers may exploit this issue to deny service to legitimate users. \nSun StorEdge 3510 FC Array with firmware version 4.21 is affected. If the above vulnerability is present, hosts requesting I/O services from the affected array may report I/O request timeouts and eventually go offline from the array, and a message similar to the following may appear in the array event log: Tue Jan 24 14:03: 06 2007 [Primary] Warning Memory Not Sufficient to Fully Support Current Config ... \n\n----------------------------------------------------------------------\n\nTry a new way to discover vulnerabilities that ALREADY EXIST in your\nIT infrastructure. \n\nThe Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT\nvulnerabilities in more than 4,700 different Windows applications. \n\nSuccessful exploitation requires that the attacker has access to the\nmanagement network to which the array\u0027s management Ethernet interface\nis connected to. \n\nThe vulnerability is reported in firmware versions prior to 4.21. \n\nSOLUTION:\nUpdate to firmware 4.21, delivered in patch 113723-18 or later. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-103106-1\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-5482"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "BID",
"id": "26086"
},
{
"db": "VULHUB",
"id": "VHN-28844"
},
{
"db": "PACKETSTORM",
"id": "60145"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2007-5482",
"trust": 2.8
},
{
"db": "BID",
"id": "26086",
"trust": 2.0
},
{
"db": "SECUNIA",
"id": "27201",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1018819",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "40168",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2007-3507",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227",
"trust": 0.8
},
{
"db": "XF",
"id": "37221",
"trust": 0.6
},
{
"db": "SUNALERT",
"id": "201253",
"trust": 0.6
},
{
"db": "SUNALERT",
"id": "103106",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-28844",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "60145",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-28844"
},
{
"db": "BID",
"id": "26086"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "PACKETSTORM",
"id": "60145"
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"id": "VAR-200710-0417",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-28844"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T23:23:41.031000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Sun Alert 103106",
"trust": 0.8,
"url": "https://blogs.oracle.com/sunsecurity/entry/sun_alert_103106_ftp_security"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103106-1"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/26086"
},
{
"trust": 1.7,
"url": "http://osvdb.org/40168"
},
{
"trust": 1.7,
"url": "http://www.securitytracker.com/id?1018819"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/27201"
},
{
"trust": 1.7,
"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201253-1"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/3507"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37221"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-5482"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-5482"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2007/3507"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/37221"
},
{
"trust": 0.3,
"url": "http://www.sun.com/products-n-solutions/hardware/docs/network_storage_solutions/workgroup/3510/index.html"
},
{
"trust": 0.3,
"url": "https://srcm.symantec.com/editvulnerabilityfixes.aspx?docid=121449"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/27201/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/network_software_inspector/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/16137/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-28844"
},
{
"db": "BID",
"id": "26086"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "PACKETSTORM",
"id": "60145"
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-28844"
},
{
"db": "BID",
"id": "26086"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"db": "PACKETSTORM",
"id": "60145"
},
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-10-16T00:00:00",
"db": "VULHUB",
"id": "VHN-28844"
},
{
"date": "2007-10-15T00:00:00",
"db": "BID",
"id": "26086"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"date": "2007-10-16T22:06:25",
"db": "PACKETSTORM",
"id": "60145"
},
{
"date": "2007-10-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"date": "2007-10-16T23:17:00",
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-29T00:00:00",
"db": "VULHUB",
"id": "VHN-28844"
},
{
"date": "2007-10-26T23:26:00",
"db": "BID",
"id": "26086"
},
{
"date": "2012-12-20T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-006227"
},
{
"date": "2007-10-17T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200710-311"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-5482"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sun StorEdge/StorageTek 3510 FC Array of FTP Service disruption in services (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-006227"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200710-311"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…