HP-UX DCE Unspecified Remote Denial Of Service Vulnerability

Bugtraq ID:	32754
Class:	Unknown
CVE:	CVE-2008-4418
Remote:	Yes
Local:	No
Published:	Dec 10 2008 12:00AM
Updated:	Jan 13 2009 04:22PM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Avaya Proactive Contact 3.0
Not Vulnerable:

HP-UX DCE Unspecified Remote Denial Of Service Vulnerability

HP-UX is prone to a remote denial-of-service vulnerability. The cause of this issue is unknown.

Exploiting this issue allows remote attackers to trigger denial-of-service conditions.

HP-UX B.11.11, B.11.23, and B.11.31 running DCE (Distributed Computing Environment) are affected.

HP-UX DCE Unspecified Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP-UX DCE Unspecified Remote Denial Of Service Vulnerability

Solution:
The vendor has released an advisory and fixes to address this issue. Please see the referenced advisory for more information.


HP HP-UX B.11.31

• HP PHSS_38259
  http://itrc.hp.com

HP HP-UX B.11.23

• HP PHSS_38258
  http://itrc.hp.com

HP-UX DCE Unspecified Remote Denial Of Service Vulnerability

References:

• HP-UX Homepage (HP)
  
• [security bulletin] HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Den ([email protected])
  
• ASA-2009-006 - HPSBUX02393 SSRT080057 rev.1 - HP-UX Running DCE, Remote Denial o (Avaya)