|
HP Tru64 UNIX BIND Predictable DNS Query IDs Vulnerability
|
|
Secunia Advisory:
|
SA26605
|
|
|
Release Date:
|
2007-08-31
|
|
Popularity:
|
6,108 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Spoofing
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | HP Tru64 UNIX 5.x
|
|
| Software: | HP Internet Express 6.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2007-2926
|
|
Description:
HP has acknowledged a vulnerability in HP Tru64 UNIX and HP Internet Express for Tru64 UNIX, which can be exploited by malicious people to poison the DNS cache.
For more information:
SA26152
The vulnerability affects the following products and versions running BIND:
* HP Tru64 UNIX v 5.1B-4
* HP Tru64 UNIX v 5.1B-3
* HP Internet Express for Tru64 UNIX (IX) v 6.6
Solution:
Apply patches.
HP Tru64 UNIX v 5.1B-4:
Prerequisite: HP Tru64 UNIX v 5.1B-4 PK6 (BL27)
Name: T64KIT1001268-V51BB27-ES-20070806.tar
http://www.itrc.hp.com/service/patch/...hid=T64KIT1001268-V51BB27-ES-20070806
HP Tru64 UNIX v 5.1B-3:
Prerequisite: HP Tru64 UNIX v 5.1B-3 PK5 (BL26)
Name: T64KIT1001273-V51BB26-ES-20070809.tar
http://www.itrc.hp.com/service/patch/...hid=T64KIT1001273-V51BB26-ES-20070809
HP Internet Express for Tru64 UNIX v 6.6:
Install the HP Tru64 UNIX ERP kit appropriate for the supported operating system version or update to version 6.7 as soon as it becomes available.
Original Advisory:
HPSBTU02256 SSRT071449:
http://www8.itrc.hp.com/service/cki/docDisplay.do?docId=c01154600
Other References:
SA26152:
http://secunia.com/advisories/26152/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
