Description
Network Appliance Data ONTAP 7.0 and earlier allows iSCSI Initiators to bypass iSCSI authentication via a modified client that skips the Security (Start) mode, as required by the Login Negotiation protocol, and uses Operational mode without proving identity.
References
- 1015103 vdb-entry
- http://www.matasano.com/advisories/netapp-iSCSI.txt
- ADV-2005-2193 vdb-entry
- 20051025 Network Appliance iSCSI Authentication Bypass mailing-list
- 15197 vdb-entry
- 17321 third-party-advisory