Cisco MDS 9000 Family Release Notes for Cisco MDS SAN-OS Release 3.3(1c) (OL-14116-08, July 2008)

Send documentation comments to [e-mail]
34
Cisco MDS 9000 Family Release Notes for Cisco MDS SAN-OS Release 3.3(1c)
OL-14116-08
Caveats
• CSCsq37212
Symptom: The show tech-support details command leaves residual files in the /tmp directory on the
MSM-18/4 module if the SME feature is not enabled. This exhausts the file system limit for open
files after issuing the the show tech-support details command more than 117 times and causes a
module reload.
Workaround: This issue is resolved.
• CSCsq42707
Symptom: When attempting to activate a zone set made of 8000 zones, the zone server on the
remote switch fails and causes the switch to reload. This only occurs if you have full zone set
distribution enabled.
Workaround: This issue is resolved.
• CSCsq60582
Symptom: Multiple Cisco products contain either of two authentication vulnerabilities in the
Simple Network Management Protocol Version 3 (SNMPv3) feature. These vulnerabilities can be
exploited when processing a malformed SNMPv3 message. These vulnerabilities could allow the
disclosure of network information or may enable an attacker to perform configuration changes to
vulnerable devices. The SNMP server is an optional service that is disabled by default. Only
SNMPv3 is impacted by these vulnerabilities.
Note SNMP versions 1, 2 and 2c are not impacted by these vulnerabilities.
The United States Computer Emergency Response Team (US-CERT) has assigned Vulnerability
Note VU#878044 to these vulnerabilities. Common Vulnerabilities and Exposures (CVE) identifier
CVE-2008-0960 has been assigned to these vulnerabilities.
This advisory is posted at
http://www.cisco.com/en/US/products/products_security_advisory09186a00809ac83b.shtml.
Workarounds are available for mitigating the impact of the vulnerabilities described in this
document.
Workaround: This issue is resolved.
• CSCsq27072
Symptom: In cases where the SCSI status for a READ command is dropped and the target does not
follow the FCP Sequence Error Recovery specification completely in responding to the REC for the
status of the exchange, Cisco SME may issue the READ again. This may result in the second data
block being returned to the host.
Workaround: This issue is resolved.
Open Caveats
• CSCsc17059
Symptom: In rare circumstances, after upgrading the SAN-OS, a Generation 1 module may be
rebooted as it stops responding to the keep alive messages from the Supervisor module.
Workaround: None.