CVE-2007-6360: High severity Sun Sparc Enterprise Server vulnerability

Published Dec 15, 2007
·
Updated

Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.

Affected Software

5 affected components
Sun Sparc Enterprise Server=m4000
Sun Sparc Enterprise Server=m5000
Sun Sparc Enterprise Server=m8000
Sun Sparc Enterprise Server=m9000
Sun Extended System Control Facility Xcp 1040

Event History

Dec 15, 2007
CVE Published
01:46 AM
Data Sourced
01:46 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2007-6360?

CVE-2007-6360 has been classified as a denial of service vulnerability with potential critical impact on affected systems.

2

How do I fix CVE-2007-6360?

Fix CVE-2007-6360 by upgrading the Sun eXtended System Control Facility (XSCF) Control Package firmware to version 1050 or later.

3

Which systems are affected by CVE-2007-6360?

CVE-2007-6360 affects Sun SPARC Enterprise M4000, M5000, M8000, and M9000 servers running vulnerable firmware versions.

4

What are the attack vectors for CVE-2007-6360?

CVE-2007-6360 can be exploited through telnet, ssh, or http network traffic to have a denial of service impact.

5

Can CVE-2007-6360 be exploited locally?

CVE-2007-6360 is primarily a remote denial of service vulnerability and does not require local exploitation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203