Secunia

Two vulnerabilities have been reported in HP-UX, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

1) An error in the processing of IPSec IKEv1 Phase 1 protocol exchange messages can be exploited to cause a DoS.

For more information:
SA17553

2) An unspecified error in IPSec can potentially be exploited to allow remote unauthorized access.

The vulnerabilities has been reported in version B.11.00, B.11.11, and B.11.23 running IPSec.

Solution
Apply updates.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
HP HPSBUX02076 SSRT5979:
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00555601

HPSBUX02082 SSRT051037:
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00574124

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area