HP-UX X.25 Transport Protocol Local Denial of Service Vulnerability

Bugtraq ID:	20029
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Sep 14 2006 12:00AM
Updated:	Sep 15 2006 05:07PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00
Not Vulnerable:

HP-UX X.25 Transport Protocol Local Denial of Service Vulnerability

HP-UX running the X.25 transport protocol is prone to an unspecified remote denial-of-service vulnerability.

A local authenticated attacker can exploit this issue to deny service to legitimate users.

HP-UX X.25 Transport Protocol Local Denial of Service Vulnerability

Specific exploit code is likely not required to trigger this issue. An attacker can use standard tools to exploit this issue.

HP-UX X.25 Transport Protocol Local Denial of Service Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the references for details.


HP HP-UX B.11.23

• HP PHNE_34999
  http://itrc.hp.com

HP HP-UX B.11.11

• HP PHNE_34988
  http://itrc.hp.com

HP HP-UX B.11.00

• HP PHNE_34009
  http://itrc.hp.com

HP-UX X.25 Transport Protocol Local Denial of Service Vulnerability

References:

• HP-UX Homepage (HP)
  
• HPSBUX02126 SSRT051019 rev.1 - HP-UX running X.25 Local Denial of Service (Dos) (Hewlett Packard)