HP-UX IPFilter Unsupported Interface Vulnerability
BID:9060
Info
HP-UX IPFilter Unsupported Interface Vulnerability
| Bugtraq ID: | 9060 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2003 12:00AM |
| Updated: | Nov 17 2003 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
HP HP-UX 11.23 HP HP-UX 11.22 HP HP-UX 11.11 HP HP-UX 11.0 |
| Not Vulnerable: | |
Discussion
HP-UX IPFilter Unsupported Interface Vulnerability
Hewlett-Packard has reported that IPFilter does not provide protection for unsupported network interfaces. This issue may lead a network administrator into a false sense of security.
Hewlett-Packard has reported that IPFilter does not provide protection for unsupported network interfaces. This issue may lead a network administrator into a false sense of security.
Exploit / POC
HP-UX IPFilter Unsupported Interface Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
HP-UX IPFilter Unsupported Interface Vulnerability
Solution:
Hewlett-Packard has released an advisory (HPSBUX0311-298) that outlines supported network interfaces as below. Please see referenced advisory for further details:
The following is a list of network interfaces supported by various versions of HP IPFilter B9901AA:
A.03.05.01 - 10BT, 100BT
A.03.05.02 - 10BT, 100BT, 1000BT, APA, VLAN
A.03.05.03 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.04 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.05 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.06 - 10BT, 100BT, 1000BT, FDDI, Token Ring
A.03.05.07 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.08 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
HP IPFilter B9901AA does not provide protection for any of the following network interfaces:
ATM, Hyperfabric, X.25, Frame Relay, PPP, IPv6.
Solution:
Hewlett-Packard has released an advisory (HPSBUX0311-298) that outlines supported network interfaces as below. Please see referenced advisory for further details:
The following is a list of network interfaces supported by various versions of HP IPFilter B9901AA:
A.03.05.01 - 10BT, 100BT
A.03.05.02 - 10BT, 100BT, 1000BT, APA, VLAN
A.03.05.03 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.04 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.05 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.06 - 10BT, 100BT, 1000BT, FDDI, Token Ring
A.03.05.07 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
A.03.05.08 - 10BT, 100BT, 1000BT, APA, VLAN, FDDI, Token Ring
HP IPFilter B9901AA does not provide protection for any of the following network interfaces:
ATM, Hyperfabric, X.25, Frame Relay, PPP, IPv6.
References
HP-UX IPFilter Unsupported Interface Vulnerability
References:
References: