HP FTP Unspecified Remote Denial of Service Vulnerability

Bugtraq ID:	29160
Class:	Unknown
CVE:	CVE-2008-0713
Remote:	Yes
Local:	No
Published:	May 12 2008 12:00AM
Updated:	Jun 11 2008 04:22PM
Credit:	The vendor reported this issue.
Vulnerable:	HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Avaya Proactive Contact 3.0 Avaya Proactive Contact 0 Avaya Predictive Dialing System (PDS) 12.0 Avaya Predictive Dialer (PDS) APC 3.0 Avaya Predictive Dialer 0
Not Vulnerable:

HP FTP Unspecified Remote Denial of Service Vulnerability

FTP running on HP-UX is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

HP FTP Unspecified Remote Denial of Service Vulnerability

To exploit this issue, an attacker can use readily available network tools.

HP FTP Unspecified Remote Denial of Service Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

HP FTP Unspecified Remote Denial of Service Vulnerability

References:

• Micro News Homepage (phptoys)
  
• [security bulletin] HPSBUX02334 SSRT071403 rev.1 - HP-UX Running ftp, Remote Den ([email protected])
  
• HPSBUX02334 SSRT071403 rev.2 - HP-UX Running ftp, Remote Denial of Service (DoS) ([email protected])
  
• ASA-2008-227 HPSBUX02334 SSRT071403 rev.1 - HP-UX Running ftp, Remote Denial of (Avaya)