5 - HPSBUX01137 SSRT5954

Executive Summary

Summary
Title	HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS)

Informations
Name	HPSBUX01137 SSRT5954	First vendor Publication	2005-04-24
Vendor	HP	Last vendor Modification	2007-10-03
Severity (Vendor)	N/A	Revision	11

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A potential security vulnerability has been identified with HP-UX running TCP/IP (IPv4). This vulnerability could be remotely exploited to cause a Denial of Service (DoS).

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00571568

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:1407

Oval ID:	oval:org.mitre.oval:def:1407
Title:	HP-UX PMTUD Remote DoS (B.11.23-IPSEC)
Description:	Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-1192	Version:	4
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
700 Series OS Release 11.22 700-series HP AND HP Release B.11.22 AND IPSec.IPSEC2-KRN is installed AND IPSec.IPSEC2-KRN version is under A.2.00.01 or TOUR version is under 3.0 or patch PHNE_32606 is not installed IPSec.IPSEC2-KRN with version less than A.2.00.01 is installed AND TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed AND NOT Patch PHNE_32606 is installed

Definition Id: oval:org.mitre.oval:def:1533

Oval ID:	oval:org.mitre.oval:def:1533
Title:	HP-UX PMTUD Remote DoS (B.11.11-IPSEC)
Description:	Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-1192	Version:	3
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
700 Series or 800 Series OS Release 11.11 700 Series OS Release 11.11 700-series HP AND HP Release B.11.11 OR 800 Series OS Release 11.11 800-series HP AND HP Release B.11.11 AND IPSec.IPSEC2-KRN is installed AND IPSec.IPSEC2-KRN version is under A.2.00.01 or TOUR version is under 3.0 IPSec.IPSEC2-KRN with version less than A.2.00.01 is installed AND TOUR_PRODUCT.T-NET2-KRN with version less than A.03.00 is installed

Definition Id: oval:org.mitre.oval:def:1552

Oval ID:	oval:org.mitre.oval:def:1552
Title:	HP-UX PMTUD Remote DoS (B.11.22)
Description:	Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-1192	Version:	3
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
700 Series OS Release 11.22 700-series HP AND HP Release B.11.22 AND Networking.NET2-KRN is installed

Definition Id: oval:org.mitre.oval:def:1607

Oval ID:	oval:org.mitre.oval:def:1607
Title:	HP-UX PMTUD Remote DoS (B.11.11)
Description:	Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-1192	Version:	4
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
700 Series or 800 Series OS Release 11.11 700 Series OS Release 11.11 700-series HP AND HP Release B.11.11 OR 800 Series OS Release 11.11 800-series HP AND HP Release B.11.11 AND Networking.NET2-KRN is installed AND NOT Patch PHNE_33159 is installed

Definition Id: oval:org.mitre.oval:def:935

Oval ID:	oval:org.mitre.oval:def:935
Title:	HP-UX PMTUD Remote DoS (B.11.23)
Description:	Unknown vulnerability in HP-UX B.11.00, B.11.04, B.11.11, B.11.22, and B.11.23, when running TCP/IP on IPv4, allows remote attackers to cause a denial of service via certain packets, related to the PMTU, a different vulnerability than CVE-2004-1060.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2005-1192	Version:	4
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
700 Series or 800 Series OS Release 11.23 700 Series OS Release 11.23 700-series HP AND HP Release B.11.23 OR 800 Series OS Release 11.23 800-series HP AND HP Release B.11.23 AND Networking.NET2-KRN is installed AND NOT Patch PHNE_32606 is installed

CPE : Common Platform Enumeration

Type	Description	Count
Os	Hp Hp-Ux cpe:2.3:o:hp:hp-ux:11.23:::::::* cpe:2.3:o:hp:hp-ux:11.22:::::::* cpe:2.3:o:hp:hp-ux:11.11:::::::* cpe:2.3:o:hp:hp-ux:11.04:::::::* cpe:2.3:o:hp:hp-ux:11.00:::::::*	5

OpenVAS Exploits

Date	Description
2009-05-05	Name : HP-UX Update for TCP/IP (IPv4) HPSBUX01137 File : nvt/gb_hp_ux_HPSBUX01137.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
15831	Multiple Vendor TCP/IP PMTU Unspecified DoS HP-UX contains a flaw that may allow a remote denial of service. The issue is caused by an unspecified error in the PMTU discovery processing when receiving a specially crafted packet on any open connection, and will result in loss of availability for the platform. No further details have been provided.

Nessus® Vulnerability Scanner

Date	Description
2007-09-25	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_35351.nasl - Type : ACT_GATHER_INFO
2007-09-25	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_35766.nasl - Type : ACT_GATHER_INFO
2005-08-01	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_32606.nasl - Type : ACT_GATHER_INFO
2005-07-05	Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHNE_33159.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:38:19	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	5
CPE ID(s)	5
osvdb(s)	1
Openvas Exploit(s)	1
Nessus® Exploit(s)	4

	Related
5	CVE-2005-1192
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 1 more Alert(s)

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0355s

Facebook rss twitter linkedin mail