CVE-2008-3349: Critical severity ibm network appliance data ontap vulnerability

Published Jul 28, 2008

Updated

Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.

Affected Software

3 affected components

NetApp Data ONTAP

IBM N Series Storage Server

NetApp Fas900

Event History

Jul 28, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

05:41 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-3349?

CVE-2008-3349 is considered a critical vulnerability that can lead to remote command execution and denial of service.

How do I fix CVE-2008-3349?

To mitigate CVE-2008-3349, you should update to the latest version of NetApp Data ONTAP or apply the recommended patches provided by NetApp.

Which systems are affected by CVE-2008-3349?

CVE-2008-3349 affects multiple versions of NetApp Data ONTAP running on NetApp and IBM eServer platforms.

What types of attacks can CVE-2008-3349 facilitate?

CVE-2008-3349 can allow remote attackers to execute arbitrary commands, cause system crashes, or access sensitive information.

Is there any workaround for CVE-2008-3349?

Currently, the best workaround for CVE-2008-3349 is to restrict access to vulnerable systems and ensure that they are updated as soon as possible.