HP TCP/IP Services for OpenVMS unknown details Denial of Service Vulnerability

Release date: 2011-11-04
Updated on: 2011-11-07

Affected Systems:
HP TCP/IP Services for OpenVMS 5.7
HP TCP/IP Services for OpenVMS 5.6
Description:
--------------------------------------------------------------------------------
Bugtraq id: 50526
Cve id: CVE-2011-3169

OpenVMS is a VMS-based multi-task multi-processor operating system.

HP TCP/IP Services for OpenVMS running POP, IMAP, and SMTP servers has a denial of service vulnerability. Remote attackers can exploit this vulnerability to crash affected applications.

<* Source: vendor

Link: http://secunia.com/advisories/46743/
Http://h20566.www2.hp.com/portal/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

HP
--
HP has released a Security Bulletin (HPSBOV02470) for this purpose and the corresponding patch:

HPSBOV02470: SSRT080123 rev.1-HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)

Link: http://h20566.www2.hp.com/portal/