HP ProCurve Threat Management Services zl Module VPN Remote Denial of Service Vulnerability

Bugtraq ID:	35654
Class:	Unknown
CVE:	CVE-2009-1423
Remote:	Yes
Local:	No
Published:	Jul 13 2009 12:00AM
Updated:	Jul 13 2009 09:46PM
Credit:	HP
Vulnerable:	HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090213
Not Vulnerable:	HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090603

HP ProCurve Threat Management Services zl Module VPN Remote Denial of Service Vulnerability

HP ProCurve Threat Management Services zl Module is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.

HP ProCurve Threat Management Services zl Module J9155A running vST.1.0.090213 firmware or prior is vulnerable.

HP ProCurve Threat Management Services zl Module VPN Remote Denial of Service Vulnerability

Attackers can use the IPSecuritas client to exploit this issue.

HP ProCurve Threat Management Services zl Module VPN Remote Denial of Service Vulnerability

Solution:
Updates are available to address this issue. Please see the references for details.


HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090213

• HP ST.1.0.090603.zip
  http://www.procurve.com/software/downloads/LicenseInformation.aspx?fil eName=http://ftp.hp.com/pub/networking/software/ST.1.0.090603.zip

HP ProCurve Threat Management Services zl Module VPN Remote Denial of Service Vulnerability

References:

• HP ProCurve Threat Management Services zl Module (HP)