HP-UX Unspecified TFTPD Denial Of Service Vulnerability

Bugtraq ID:	7973
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 19 2003 12:00AM
Updated:	Jun 19 2003 12:00AM
Credit:	This vulnerability was reported in a HP-UX bulletin.
Vulnerable:	HP HP-UX 11.22 HP HP-UX 11.11 HP HP-UX 11.0
Not Vulnerable:

HP-UX Unspecified TFTPD Denial Of Service Vulnerability

HP-UX's tftp implementation is prone to an issue that may result in a denial of service condition when processing certain network traffic.

The precise technical details of this vulnerability are currently unknown. This BID will be updated as further information becomes available.

HP-UX Unspecified TFTPD Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP-UX Unspecified TFTPD Denial Of Service Vulnerability

Solution:
A revised version of HP advisory HPSBUX0306-266 is available. Please see the attached advisory for more information.

HP has released a revision to the previously released advisory. Please see the advisory for more information.

The following fixes are available:


HP HP-UX 11.0

• HP PHNE_29129.depot
  ftp://tftpd:[email protected]/PHNE_29129.depot

HP HP-UX 11.11

• HP PHNE_29081.depot
  ftp://tftpd:[email protected]/PHNE_29081.depot

HP HP-UX 11.22

• HP PHNE_29130.depot
  ftp://tftpd:[email protected]/PHNE_29130.depot

HP-UX Unspecified TFTPD Denial Of Service Vulnerability

References: