The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).

s700_800 11.23 NFS cumulative patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

s700_800 11.23 Lock Manager cumulative patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

s700_800 11.23 RPC commands and daemons cumulative patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

s700_800 11.23 NIS/NIS+ cumulative patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

s700_800 11.23 Sept04 base patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running RPC services, where the vulnerability     may be exploited by an unauthorized remote user to     create a denial of service (DoS). (HPSBUX01020 SSRT2384)

  - A potential vulnerability has been identified in HP-UX     running the Veritas File System (VxFS) that may allow a     local authorized user access to unauthorized data.

  - A potential security vulnerability has been identified     with HP-UX running TCP/IP. The potential vulnerability     could be exploited remotely to cause a Denial of Service     (DoS). (HPSBUX02087 SSRT4728)

  - A potential security vulnerability has been found in     HP-UX running rpc.ypupdated. The vulnerability could be     exploited to allow remote unauthorized access.
    (HPSBUX01002 SSRT4688)

s700_800 11.00 ONC/NFS General Release/Performance Patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running RPC services, where the vulnerability     may be exploited by an unauthorized remote user to     create a denial of service (DoS). (HPSBUX01020 SSRT2384)

  - The error messages returned by rpc.mountd can be used to     determine whether a file exists. (HPSBUX00272 SSRT3596)

s700_800 11.11 ONC/NFS General Release/Performance Patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - The error messages returned by rpc.mountd can be used to     determine whether a file exists. (HPSBUX00272 SSRT3596)

  - A potential security vulnerability has been identified     with HP-UX running RPC services, where the vulnerability     may be exploited by an unauthorized remote user to     create a denial of service (DoS). (HPSBUX01020 SSRT2384)

s700_800 11.22 ONC/NFS General Release/Performance Patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running RPC services, where the vulnerability     may be exploited by an unauthorized remote user to     create a denial of service (DoS). (HPSBUX01020 SSRT2384)

  - Potential buffer overflow in XDR library. (HPSBUX00215     SSRT2336)

  - Potential buffer overflow in xdrmem_getbytes() and     related functions. (HPSBUX00252 SSRT2439)

  - The error messages returned by rpc.mountd can be used to     determine whether a file exists. (HPSBUX00272 SSRT3596)

s700_800 11.23 libnsl cumulative patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

s700_800 11.04 (VVOS) ONC/NFS General Release/Perf Patch : 

A potential security vulnerability has been identified with HP-UX running RPC services, where the vulnerability may be exploited by an unauthorized remote user to create a denial of service (DoS).

ID	Name	Product	Family	Severity
56839	HP-UX PHNE_30094 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium
56838	HP-UX PHNE_30093 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium
56837	HP-UX PHNE_30092 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium
56836	HP-UX PHNE_30091 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium
17400	HP-UX PHKL_31500 : s700_800 11.23 Sept04 base patch	Nessus	HP-UX Local Security Checks	high
16929	HP-UX PHNE_29210 : s700_800 11.00 ONC/NFS General Release/Performance Patch	Nessus	HP-UX Local Security Checks	medium
16928	HP-UX PHNE_29211 : s700_800 11.11 ONC/NFS General Release/Performance Patch	Nessus	HP-UX Local Security Checks	medium
16911	HP-UX PHNE_29449 : s700_800 11.22 ONC/NFS General Release/Performance Patch	Nessus	HP-UX Local Security Checks	medium
16725	HP-UX PHNE_30090 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium
16607	HP-UX PHNE_30808 : HP-UX Running RPC, Remote Denial of Service (DoS) (HPSBUX01020 SSRT2384 rev.2)	Nessus	HP-UX Local Security Checks	medium

Detections

Analytics

CVE-2002-1265

high

Tenable Plugins

medium

medium

medium

medium

high

medium

medium

medium

medium

medium