|
COMMAND 3Ware 3DM denial of service attack SYSTEMS AFFECTED ? PROBLEM Nathan Neulinger [nneul@umr.edu] says : If you connect to 3dm port 1080 on either linux or windows and send: GET / HTTP/1.1 Host: foo Accept-Charset: bar 3dm server will terminate immediately. Other 3dm problems - it flips out and refuses to accept a login if you have ANY cookies sent. This screws you over if you have a sitewide .domain.edu cookie for example. SOLUTION ?