A vulnerability has been reported in HP Tru64 UNIX, which can be exploited by malicious people to poison the DNS cache.

The vulnerability is caused due to an error in DNS BIND4 and BIND8 when they are configured to be used as the target name server for DNS forwarders. This can be exploited in DNS cache poison attacks to e.g. redirect DNS clients to malicious or spoofed websites.

The vulnerability affects the following versions:
* HP Tru64 UNIX 5.1B-3
* HP Tru64 UNIX 5.1B-2/PK4
* HP Tru64 UNIX 5.1A PK6
* HP Tru64 UNIX 4.0G PK4
* HP Tru64 UNIX 4.0F PK8

Solution
Apply ERP kits.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Original Advisory
HPSBTU02095 SSRT051007:
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837

Deep Links
Links available in Customer Area