HP Advanced Server/9000 RFC-NetBIOS Denial Of Service Vulnerability

Bugtraq ID:	5195
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 10 2002 12:00AM
Updated:	Jul 10 2002 12:00AM
Credit:	Discovery first detailed in the HP advisory HPSBUX0207-198, Sec. Vulnerability in ASUnetbios.
Vulnerable:	HP Advanced Server/9000 B.04.09 HP Advanced Server/9000 B.04.08 HP Advanced Server/9000 B.04.07 HP Advanced Server/9000 B.04.06 HP Advanced Server/9000 B.04.05
Not Vulnerable:

HP Advanced Server/9000 RFC-NetBIOS Denial Of Service Vulnerability

A denial of service vulnerability has been reported for Advanced Server/9000. It is possible for the RFC-NetBIOS service to panic and fail to respond to further queries when a malformed UDP packet is received on port 139.

When the service panics, it can lead to a denial of service condition. The RFC-NetBIOS service must be restarted for normal operations to resume.

HP Advanced Server/9000 RFC-NetBIOS Denial Of Service Vulnerability

Solution:
The vendor has issued patches to address this vulnerability:


HP Advanced Server/9000 B.04.07

• HP PHNE_26988
  

HP Advanced Server/9000 B.04.05

• HP PHNE_26988
  

HP Advanced Server/9000 B.04.06

• HP PHNE_26988
  

HP Advanced Server/9000 B.04.08

• HP PHNE_26988
  

HP Advanced Server/9000 B.04.09

• HP PHNE_26988
  

HP Advanced Server/9000 RFC-NetBIOS Denial Of Service Vulnerability

References: