First published: Sat Sep 04 2004(Updated: )
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Brocade Silkworm Fiber Channel Switch | =3200 | |
Brocade Silkworm Fiber Channel Switch | =3250 | |
Brocade Silkworm Fiber Channel Switch | =3800 | |
Brocade Silkworm Fiber Channel Switch | =3850 | |
Brocade Silkworm Fiber Channel Switch | =3900 | |
Brocade Silkworm Fiber Channel Switch | =2010 | |
Brocade Silkworm Fiber Channel Switch | =2040 | |
Brocade Silkworm Fiber Channel Switch | =2050 | |
Engenio Storage Controller | =2822 | |
Engenio Storage Controller | =2882 | |
Engenio Storage Controller | =4884 | |
Engenio Storage Controller | =5884 | |
IBM DS4100 | ||
Storagetek D280 | ||
broadcom fabric operating system | =2.1.2 | |
broadcom fabric operating system | =2.2 | |
broadcom fabric operating system | =3.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1663 has a severity rating that suggests it can lead to denial of service and potential data corruption.
To mitigate CVE-2004-1663, it is recommended to apply vendor patches and updates for affected storage controllers.
CVE-2004-1663 affects several products including the Brocade SilkWorm series, IBM DS4100, and various Engenio storage controllers.
CVE-2004-1663 allows remote attackers to send crafted TCP packets that can freeze the device and potentially lead to data corruption.
Yes, there are known exploits for CVE-2004-1663 that leverage the vulnerability to perform denial of service attacks.