HP-UX PHNE_40339 : s700_800 11.23 BIND 9.2.0 Revision 5.0

high Nessus Plugin ID 46813

Language:

New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.23 BIND 9.2.0 Revision 5.0 :

The remote HP-UX host is affected by multiple vulnerabilities :

- A potential security vulnerability has been identified with HP-UX running BIND. The vulnerability could be exploited remotely to create a Denial of Service (DoS) and permit unauthorized disclosure of information.
(HPSBUX02546 SSRT100159)

- A potential security vulnerability has been identified with HP-UX running BIND. The vulnerability could be exploited remotely to create a Denial of Service (DoS).
(HPSBUX02451 SSRT090137)

Solution

Install patch PHNE_40339 or subsequent.

See Also

http://www.nessus.org/u?937b96ed

http://www.nessus.org/u?237e5744

Plugin Details

Severity: High

ID: 46813

File Name: hpux_PHNE_40339.nasl

Version: 1.21

Type: local

Published: 6/7/2010

Updated: 1/11/2021

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.6

Temporal Score: 6.3

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 5/28/2010

Exploitable With

Core Impact

Reference Information

CVE: CVE-2009-0696, CVE-2009-4022, CVE-2010-0290, CVE-2010-0382

BID: 35848, 37118

HP: emr_na-c01835108, emr_na-c02263226, HPSBUX02451, HPSBUX02546, SSRT090137, SSRT100159

CWE: 16