HP ProCurve Threat Management Services zl Module CRL Security Bypass Vulnerability

Bugtraq ID:	35659
Class:	Design Error
CVE:	CVE-2009-1422
Remote:	Yes
Local:	No
Published:	Jul 13 2009 12:00AM
Updated:	Jul 13 2009 09:36PM
Credit:	The vendor disclosed this issue
Vulnerable:	HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090213
Not Vulnerable:	HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090603

HP ProCurve Threat Management Services zl Module CRL Security Bypass Vulnerability

HP ProCurve Threat Management Services zl Module is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass certain security restrictions, which may aid in launching further attacks.

ProCurve Threat Management Services zl Module J9155A running vST.1.0.090213 firmware or prior is vulnerable.

HP ProCurve Threat Management Services zl Module CRL Security Bypass Vulnerability

The following steps illustrate this issue:

1. Go to VPN-->Certificates--> CRL page and load a CRL list.
2. Save the entire configuration.
3. Reboot the TMS zl Module.
4. Once the TMS zl Module is available, go to VPN--> Certificates--> CRL page and the CRL is no longer available.

HP ProCurve Threat Management Services zl Module CRL Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.


HP ProCurve Threat Mgmt Services zl Module (J9155A) ST.1.0.090213

• HP ST.1.0.090603.zip
  http://www.procurve.com/software/downloads/LicenseInformation.aspx?fil eName=http://ftp.hp.com/pub/networking/software/ST.1.0.090603.zip

HP ProCurve Threat Management Services zl Module CRL Security Bypass Vulnerability

References:

• HP ProCurve Threat Management Services zl Module (HP)
  
• [security bulletin] HPSBGN02446 SSRT090111 rev.1 - HP ProCurve Threat Management ([email protected])