HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability

Bugtraq ID:	26093
Class:	Unknown
CVE:	CVE-2007-5536
Remote:	No
Local:	Yes
Published:	Oct 16 2007 12:00AM
Updated:	Oct 31 2007 07:36PM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP HP-UX 11.23 HP HP-UX 11.11 HP HP-UX 11.31 Avaya Proactive Contact 0 Avaya Predictive Dialer (PDS) APC 3.0 Avaya Predictive Dialer 0
Not Vulnerable:

HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability

HP-UX running OpenSSL software is prone to a local denial-of-service vulnerability.

Exploiting this issue allows local attackers to deny service to legitimate users.

This issue affects HP-UX B.11.11, B.11.23, B.11.31 when running versions of OpenSSL prior to vA.00.09.07l.

HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.

HP-UX OpenSSL Unspecified Local Denial Of Service Vulnerability

References:

• HP-UX Homepage (HP)
  
• [security bulletin] HPSBUX02277 SSRT071453 rev.1 - HP-UX Running OpenSSL, Local (HP)
  
• ASA-2007-432 - HP-UX Running OpenSSL, Local Denial of Service (DoS) (HPSBUX02277 (Avaya)