Jeremy Jethro has discovered a vulnerability in DCE/DFS for Tru64 UNIX, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the DCE server. This can be exploited to cause a buffer overflow by sending a specially crafted packet to a vulnerable DCE server.

According to the vendor, the vulnerability can only be exploited to cause the server to stop responding and may also affect DCE clients with open associations to the server. However, @stake reports that successful exploitation allows execution of arbitrary code.

The vulnerability affects all versions of DCE/DFS for Tru64 UNIX v4.1.4 (ifspec), v4.1.5, v4.2, and v4.3.

Solution
Support for HP Tru64 DCE/DFS products is handled by Entegrity Solutions.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jeremy Jethro, @stake.

Changelog
Further details available to Secunia VIM customers

Original Advisory
HP:
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01051

@stake:
http://www.atstake.com/research/advisories/2004/a072204-1.txt

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers