HP TCP/IP Services for OpenVMS BIND Vulnerability - Advisories

HP TCP/IP Services for OpenVMS BIND Vulnerability

Secunia Advisory:	SA10774
Release Date:	2004-02-03

Critical:	Not critical
Impact:	DoS
Where:	From local network
Solution Status:	Vendor Patch

Software:	HP TCP/IP Services for OpenVMS 5.x

CVE reference:	CVE-2003-0914 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: HP has acknowledged that TCP/IP for OpenVMS BIND 8 software is affected by a vulnerability, which allows malicious people to poison the DNS cache. For more information: SA10300 The vulnerability affects the following products: * HP TCP/IP V5.1 for HP OpenVMS Alpha and VAX * HP TCP/IP V5.3 for HP OpenVMS VAX Solution: HP has issued temporary fixes until ECO kits are released. Temporary fixes are available at: ftp://vmstcpip:vmstcpip@hprc.external.hp.com/ TCPIP$BIND_SERVER.EXE_ECO_I_V_V51 TCPIP$BIND_SERVER.EXE_ECO_I_A_V51 TCPIP$BIND_SERVER.EXE_ECO_G_V_V53 Provided and/or discovered by: Reported by vendor. Other References: SA10300: http://secunia.com/advisories/10300/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

4 Related Secunia Security Advisories

1. HP TCP/IP Services for OpenVMS BIND DNS Cache Poisoning

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Opera Multiple Vulnerabilities

2.	Sun Solaris NFSv4 Client Kernel Module Denial of Service

3.	Banner Management "id" SQL Injection Vulnerability

4.	Avaya CMS Solaris "picld" Denial of Service

5.	Active PHP Bookmarks "id" SQL Injection Vulnerability

6.	Avaya CMS Solaris "snoop" Multiple Vulnerabilities

7.	Subdreamer Light Global Variables SQL Injection Vulnerability

8.	Ubuntu update for postfix

9.	Avaya CMS Solaris namefs Kernel Module Privilege Escalation

10.	WS_FTP Home / Professional Format String Vulnerability