US-CERT Technical Cyber Security Alert TA04-111A -- Vulnerabilities in TCP

[Berlene Herren]

HP will provide notice of the availability of any necessary patches through standard security bulletin announcements and be available from your normal HP Services support channel.

Berlene

[Todd McDaniel_1]

where can we find the notices that affect HP?

I thought there was a link on itrc to find all HPUX related certs?

[Mark Grant]

Oh, it's only tcp thats affected. Shouldn't worry too many people then

Thanks for the info Berlene,

I too would be intersted to see the announcement if you have a url.

Regards

[John Payne_2]

http://www.osvdb.org/displayvuln.php?osvdb_id=4030

http://www.us-cert.gov/cas/techalerts/TA04-111A.html

http://www.uniras.gov.uk/vuls/2004/236929/index.htm

http://www.kb.cert.org/vuls/id/415294

http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml

http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-nonios.shtml


But it seems to be the TCP Sequence Vul. from a few years ago...

Hope it helps

John

[Berlene Herren]

As soon as I get more, you know I will get it out to you :-)

Berlene

[Todd McDaniel_1]

Thanks John,

I thought I stumbled on an official ITRC HPUX website...??? that listed HP specific stuff...


no points here