Happy Holidays from the X-Force. Newer JetDirect interfaces feature a web interface for configuration, access, and control. Because the interface does not use SSL encryption, the potential exists for exposing sensitive information, such as administrative passwords and configuration information, to sniffing attacks.
Vulnerable controllers are prone to hang or shutdown shortly after receiving the attacking packets.
The failure can extend even to their non-network functionality and can cause the controlled equipment to fail. There exists a significant possibility of the controlled equipment being left in a non-safe or inoperable condition, possibly leading to physical damage. The fcagent RPC service is used to service requests about the status or configuration of a FibreVault enclosure. It is installed by default on Origin and Onyx2 platforms running IRIX 6.4 and higher. SGI has discovered a vulnerability that would allow a remote attacker to crash the FibreVault program.