HP Jetdirect 635n IPv6/IPsec Print Server IKE Exchange Denial Of Service Vulnerability

Bugtraq ID:	15471
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 16 2005 12:00AM
Updated:	Nov 16 2005 12:00AM
Credit:	Discovery is credited to NISCC, CERT-FI, and the Oulu University Secure Programming Group.
Vulnerable:	HP Jetdirect 635n IPv6/IPsec Print Server (J7961A)
Not Vulnerable:	HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) V.31.08

HP Jetdirect 635n IPv6/IPsec Print Server IKE Exchange Denial Of Service Vulnerability

HP Jetdirect 635n IPv6/IPsec Print Server is prone to a denial of service vulnerability. This issue is due to a security flaw in HP's IPSec implementation. This vulnerability may be triggered by malformed IKE traffic.

This issue was discovered with the PROTOS ISAKMP Test Suite and is related to the handling of malformed IKEv1 traffic.

HP Jetdirect 635n IPv6/IPsec Print Server IKE Exchange Denial Of Service Vulnerability

This issue can be reproduced using the PROTOS ISAKMP Test Suite.

HP Jetdirect 635n IPv6/IPsec Print Server IKE Exchange Denial Of Service Vulnerability

Solution:
The vendor has released advisory HPSBPI02078 SSRT5979 to address this issue. Please see the referenced advisory for further information on obtaining fixes.

HP Jetdirect 635n IPv6/IPsec Print Server IKE Exchange Denial Of Service Vulnerability

References:

• HP Jetdirect 635n IPv6/IPsec Print Server - overview and features (HP)
  
• HPSBPI02078 SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote (HP)
  
• Multiple Vulnerability Issues in Implementations of ISAKMP Protocol (NISCC)