HP ProCurve Unspecified Denial of Service Vulnerability

Bugtraq ID:	19310
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 02 2006 12:00AM
Updated:	Aug 03 2006 03:51PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP ProCurve Switch 6200yl 0 HP ProCurve Switch 5400zl 0 HP ProCurve Switch 3500yl 0
Not Vulnerable:

HP ProCurve Unspecified Denial of Service Vulnerability

ProCurve is prone to an unspecified remote denial-of-service vulnerability. This issue is most likely due to a failure in the device to properly sanitize user-supplied input.

An attacker can exploit this issue to crash an affected device, effectively denying service to legitimate users.

This issue affects ProCurve switches running software prior to K.11.33.

HP ProCurve Unspecified Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

HP ProCurve Unspecified Denial of Service Vulnerability

Solution:
The vendor has released version K.11.33 of the affected software to address this issue.


HP ProCurve Switch 6200yl 0

• HP K.11.33
  http://www.hp.com/rnd/software/switches.htm

HP ProCurve Switch 5400zl 0

• HP K.11.33
  http://www.hp.com/rnd/software/switches.htm

HP ProCurve Switch 3500yl 0

• HP K.11.33
  http://www.hp.com/rnd/software/switches.htm

HP ProCurve Unspecified Denial of Service Vulnerability

References:

• hp procurve switches & hubs (HP)