Panzura Security Advisory PZOS-2013-004
|Title:||PZOS CIFS File Resource Exhaustion|
|Affected Products:||PZOS 220.127.116.11.5075.E or Below|
A vulnerability in the CIFS/SMB implementation on the Panzura PZOS version 18.104.22.168.5075.E or below has been discovered. Exploitation of this vulnerability may result in a Denial of Service (DoS) attack.
A condition exists in the PZOS implementation of the CIFS protocol whereby an excessive number of file requests in a short timeframe could disable the Cloud Controller CIFS service.
A targeted exploit of this vulnerability could result in loss of service due to service failure.
Upgrade the Panzura software to PZOS version 22.214.171.124 or higher; any future major or minor releases will also correct the issue. Release notes for this version will outline details as necessary for this correction.
Back to Advisories List