A buffer overflow vulnerability exists in the Broadcom NetXtreme management firmware. This vulnerability may allow a remote attacker to execute arbitrary code on an affected device.
The Alert Standard Format (ASF) Specification is a protocol developed by Distributed Management Task Force, Inc. (DMTF) that defines remote control and alerting interfaces for systems and devices when a host operating system is not present. The management firmware supplied with certain Broadcom NetXtreme network adapters supports ASF. A buffer overflow vulnerability exists in certain versions of this firmware when handling malformed ASF version 2.0 RAKP Message 1 packets. Devices with affected versions of the firmware would only be vulnerable if Remote Management and Control Protocol (RMCP) over the RMCP Security-Extensions Protocol (RSP) manageability is enabled. This functionality is typically disabled by default.
Broadcom notes that reliable exploitation of this vulnerability is specific to the device type and firmware version in use on the target system.
A remote, unauthenticated attacker may be able to execute arbitrary or chosen code on the embedded management controller or cause the controller to halt operation, resulting in a denial of service.
Apply an update from the vendor
Disable ASF support
Thanks to Rob Swindell of Broadcom for reporting this vulnerability. Broadcom credits Loiれ Duflot, Yves-Alexis Perez of the French Agence Nationale de la Se〜urité des Systèmes d’Information (ANSSI) with reporting this issue.
This document was written by Chad R Dougherty.
|Date First Published:||2010-03-25|
|Date Last Updated:||2010-06-21 12:08 UTC|