HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

s700_800 11.00 Cumulative STREAMS Patch : 

A potential security vulnerability has been identified with HP-UX running TCP/IP. The potential vulnerability could be exploited remotely to cause a Denial of Service (DoS).

s700_800 11.11 Cumulative STREAMS Patch : 

A potential security vulnerability has been identified with HP-UX running TCP/IP. The potential vulnerability could be exploited remotely to cause a Denial of Service (DoS).

s700_800 11.04 (VVOS) cumulative ARPA Transport patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running TCP/IP. This vulnerability could be     remotely exploited by an unauthorized user to cause a     Denial of Service(DoS). References: NISCC VU#532967,     CAN-2004-0790, CAN-2004-0791, CAN-2004-1060.
    (HPSBUX01164 SSRT4884)

  - A potential security vulnerability has been identified     with HP-UX running TCP/IP. The potential vulnerability     could be exploited remotely to cause a Denial of Service     (DoS). (HPSBUX02087 SSRT4728)

s700_800 11.23 Sept04 base patch : 

The remote HP-UX host is affected by multiple vulnerabilities :

  - A potential security vulnerability has been identified     with HP-UX running RPC services, where the vulnerability     may be exploited by an unauthorized remote user to     create a denial of service (DoS). (HPSBUX01020 SSRT2384)

  - A potential vulnerability has been identified in HP-UX     running the Veritas File System (VxFS) that may allow a     local authorized user access to unauthorized data.

  - A potential security vulnerability has been identified     with HP-UX running TCP/IP. The potential vulnerability     could be exploited remotely to cause a Denial of Service     (DoS). (HPSBUX02087 SSRT4728)

  - A potential security vulnerability has been found in     HP-UX running rpc.ypupdated. The vulnerability could be     exploited to allow remote unauthorized access.
    (HPSBUX01002 SSRT4688)

ID	Name	Product	Family	Severity
22895	HP-UX PHNE_30161 : HP-UX running TCP/IP Remote Denial of Service (DoS) (HPSBUX02087 SSRT4728 rev.5)	Nessus	HP-UX Local Security Checks	high
22172	HP-UX PHNE_34131 : HP-UX running TCP/IP Remote Denial of Service (DoS) (HPSBUX02087 SSRT4728 rev.5)	Nessus	HP-UX Local Security Checks	high
19486	HP-UX PHNE_33427 : s700_800 11.04 (VVOS) cumulative ARPA Transport patch	Nessus	HP-UX Local Security Checks	high
17400	HP-UX PHKL_31500 : s700_800 11.23 Sept04 base patch	Nessus	HP-UX Local Security Checks	high

Detections

Analytics

CVE-2005-4316

high

Tenable Plugins

high

high

high

high