HP-UX rpc.yppasswd Unspecified Remote Denial Of Service Vulnerability

Bugtraq ID:	26971
Class:	Unknown
CVE:	CVE-2007-6419
Remote:	Yes
Local:	No
Published:	Dec 20 2007 12:00AM
Updated:	Jan 12 2008 12:59AM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Avaya Proactive Contact 0 Avaya Predictive Dialer (PDS) APC 3.0 Avaya Predictive Dialer 0
Not Vulnerable:

HP-UX rpc.yppasswd Unspecified Remote Denial Of Service Vulnerability

HP-UX 'rpc.yppasswd' is prone to a remote denial-of-service vulnerability. The cause of this issue is unknown.

Exploiting this issue allows remote attackers to trigger denial-of-service conditions, denying further service to legitimate users.

HP-UX rpc.yppasswd Unspecified Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP-UX rpc.yppasswd Unspecified Remote Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes to address this issue. Please see the referenced advisory for more information.


HP HP-UX B.11.31

• HP PHNE_36449
  http://itrc.hp.com/

HP HP-UX B.11.11

• HP PHNE_36168
  http://itrc.hp.com/

HP HP-UX B.11.23

• HP PHNE_36260
  http://itrc.hp.com/

HP-UX rpc.yppasswd Unspecified Remote Denial Of Service Vulnerability

References:

• HP-UX Homepage (HP)
  
• ASA-2008-024 HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS) (HPSBUX (Avaya)