Enterasys SSR8000 SmartSwitch - Port Scan Denial of Service

Author: Mella Marco
type: dos
platform: hardware
port: 
date_added: 2002-09-13  
date_updated: 2012-10-07  
verified: 1  
codes: CVE-2002-1501;OSVDB-10063  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 21791.txt  

source: https://www.securityfocus.com/bid/5703/info

The SSR8000 is a SmartSwitch distributed and maintained by Enterasys.

It has been discovered that SSR8000 switches react unpredictably when portscanned. When these switches are scanned using specific types of TCP traffic, and scanned on certain ports, the switch becomes unstable. It has been reported that this can be reproduced consistently to cause the switch to crash.

nmap -PT 10.2.1.1 -p '15077-15078'