Description

HP has issued an update for Kerberos in OpenVMS. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct spoofing attacks, cause a DoS (Denial of Service), and compromise a vulnerable system.

For more information:
SA29428
SA34347
SA38080
SA42396

The vulnerabilities are reported in Kerberos for OpenVMS version 3.1 and earlier.

Solution
Update to Kerberos version 3.2 for OpenVMS Alpha and OpenVMS Integrity servers.
Further details available to Secunia VIM customers

Original Advisory
HPSBOV02682 SSRT100495:
https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02824440

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers