SSRT3460 Network traffic can cause programs to fail

[Berlene Herren]

=================================================================
A security bulletin has been issued:

-----------------------------------------------------------------
Source: HEWLETT-PACKARD COMPANY
SECURITY BULLETIN: HPSBUX0306-264
Originally issued: 04 June 2003
SSRT3460 Network traffic can cause programs to fail
-----------------------------------------------------------------

To access the bulletin from the itrc:

Select "maintenance and support"
Select "search technical knowledge base"
Select "HP-UX Software Security Bulletins"
Select "Search by Security Bulletin Number"
Enter "HPSBUX0306-264"
Search

The complete list of security bulletins can be found here:

http://itrc.hp.com/cki/bin/doc.pl/screen=ckiSecurityBulletin
=================================================================

Berlene

[Michael R. Monteith]

Our team builds depots for the rest of the company. We have a team that evaluates these security bulletins and patches and decides the impact to the company.

I realize that bulletins have to be somewhat vague as to not give out exact vulnerabilities. But this does not contain enough information to determine what types of applications, what type of traffic, or in other words determine much of anything regarding impact. If something like diagmond is only affected is a huge difference than arbitrary traffic taking down and customer application or database.

Given the nature of ARPA patches and the history of them being recalled practically before they are out the door, our company needs to know a bit more about how to determine if the impact warrants putting it on any systems. Also considering there is a problem in the past with ARPA patch causing SQL BackTrack not to work.

Thanks
Michael