CVE-2007-6360

high

Description

Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38860

http://www.vupen.com/english/advisories/2007/4098

http://www.securityfocus.com/bid/26712

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201333-1

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103159-1

http://securitytracker.com/id?1019048

http://secunia.com/advisories/27926

http://osvdb.org/40844

http://osvdb.org/40843

http://osvdb.org/40842

Details

Source: Mitre, NVD

Published: 2007-12-15

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.023