HP-UX PHNE_44235 : s700_800 11.11 NTP timeservices upgrade plus utilities
High Nessus Plugin ID 82682
Synopsis
The remote HP-UX host is missing a security-related patch.
Description
s700_800 11.11 NTP timeservices upgrade plus utilities :
Potential security vulnerabilities have been identified with HP-UX
running NTP. These could be exploited remotely to execute code, create
a Denial of Service (DoS), or other vulnerabilities. References:
CVE-2014-9293 - Insufficient Entropy in Pseudo-Random Number Generator
(PRNG) (CWE-332) CVE-2014-9294 - Use of Cryptographically Weak PRNG
(CWE-338) CVE-2014-9295 - Stack Buffer Overflow (CWE-121)
CVE-2014-9296 - Error Conditions, Return Values, Status Codes
(CWE-389) CVE-2014-9297 - Improper Check for Unusual or Exceptional
Conditions (CWE-754) SSRT101872 VU#852879.
Solution
Install patch PHNE_44235 or subsequent.