HP AAA Server Denial of Service Vulnerability

Bugtraq ID:	10094
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Apr 09 2004 12:00AM
Updated:	Apr 09 2004 12:00AM
Credit:	Announced by HP.
Vulnerable:	HP AAA Server
Not Vulnerable:

HP AAA Server Denial of Service Vulnerability

HP has issued a notice, SSRT3622, stating that a remotely exploitable denial of service condition affects AAA Server. Further details are unknown as the advisory (document ID: HPSBUX01011) appears to be unavailable at this time. It is likely that attackers need not authenticate prior to exploiting the vulnerability. A successful attack may result in a prolonged denial of service, perhaps of complete network service, as users may not be able to authenticate.

This entry will be updated as more information becomes available. The link to the ITRC (login required):

http://itrc.hp.com

HP AAA Server Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP AAA Server Denial of Service Vulnerability

Solution:
HP may have fixes listed in advisory HPSBUX01011 (SSRT3622).

The link to the ITRC (login required):

http://itrc.hp.com

The advisory is not available at the time of analysis.

HP AAA Server Denial of Service Vulnerability

References:

• HP IT Resource Center (for Europe) (HP IT Resource Center)
  
• HP IT Resource Center (for US, Canada, Asia-Pacific, & Latin-America) (HP IT Resource Center)