HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
BID:9414
Info
HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 9414 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jan 13 2004 12:00AM |
| Updated: | Jan 13 2004 12:00AM |
| Credit: | The disclosure of these issues has been credited to the vendor. |
| Vulnerable: |
Compaq Tru64 5.1 b PK2 (BL24) Compaq Tru64 5.1 b PK2 (BL22) Compaq Tru64 5.1 a |
| Not Vulnerable: | |
Discussion
HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
HP has reported multiple local and remote buffer overflow vulnerabilities Tru64 UNIX. The conditions are reported to exist in Tru64 UNIX running IPsec and SSH software. Immediate consequences of an attack may result in a denial of service. An attacker may leverage the issues by exploiting an unbounded memory copy operation to overwrite the saved return address/base pointer, causing an affected procedure to return to an address of their choice. Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the vulnerable software in order to gain unauthorized access, however, this has not been confirmed at the moment.
HP Tru64 UNIX versions 5.1B PK2 (BL22), PK3 (BL24) and V5.1A running IPsec and SSH software kits prior to IPsec 2.1.1 and SSH 3.2.2 have been reported to be prone to these issues.
This vulnerability record will be divided into multiple Bugtraq IDs when analysis of the individual issues is complete. Some of these issues may already be known. Where it is appropriate, existing Bugtraq IDs will also be updated to reflect the information in the advisory. Although unconfirmed, it is likely that these issues are related to OpenSSL SSLv2 Client_Master_Key Remote Denial Of Service Vulnerability (BID 8746), OpenSSL ASN.1 Parsing Vulnerabilities (BID 8732), and OpenSSL ASN.1 Large Recursion Remote Denial Of Service Vulnerability (BID 8970).
HP has reported multiple local and remote buffer overflow vulnerabilities Tru64 UNIX. The conditions are reported to exist in Tru64 UNIX running IPsec and SSH software. Immediate consequences of an attack may result in a denial of service. An attacker may leverage the issues by exploiting an unbounded memory copy operation to overwrite the saved return address/base pointer, causing an affected procedure to return to an address of their choice. Successful exploitation of this issue may allow an attacker to execute arbitrary code in the context of the vulnerable software in order to gain unauthorized access, however, this has not been confirmed at the moment.
HP Tru64 UNIX versions 5.1B PK2 (BL22), PK3 (BL24) and V5.1A running IPsec and SSH software kits prior to IPsec 2.1.1 and SSH 3.2.2 have been reported to be prone to these issues.
This vulnerability record will be divided into multiple Bugtraq IDs when analysis of the individual issues is complete. Some of these issues may already be known. Where it is appropriate, existing Bugtraq IDs will also be updated to reflect the information in the advisory. Although unconfirmed, it is likely that these issues are related to OpenSSL SSLv2 Client_Master_Key Remote Denial Of Service Vulnerability (BID 8746), OpenSSL ASN.1 Parsing Vulnerabilities (BID 8732), and OpenSSL ASN.1 Large Recursion Remote Denial Of Service Vulnerability (BID 8970).
Exploit / POC
HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
Solution:
HP has released Security Bulletin SSRT3629A/B with fixes to address these issues. Users are advised to contact the vendor to obtain patches. Please see the referenced advisory for more information.
Solution:
HP has released Security Bulletin SSRT3629A/B with fixes to address these issues. Users are advised to contact the vendor to obtain patches. Please see the referenced advisory for more information.
References
HP Tru64 UNIX Unspecified Remote Buffer Overflow Vulnerabilities
References:
References: