Oval Definition:oval:org.mitre.oval:def:19540
Revision Date:2015-04-20Version:29
Title:HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
Description:The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-0169
Platform(s):HP-UX 11
Product(s):
Definition Synopsis
  • Criteria meets HP Security Bulletin HPSBUX02867
  • platforms
  • HP-UX B.11.23
  • OR HP-UX B.11.31
  • AND filesets tests
  • Jdk15.JDK15-COM version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-DEMO version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-IPF32 version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-IPF64 version is less than 1.5.0.28.00
  • OR Jre15.JRE15-COM version is less than 1.5.0.28.00
  • OR Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00
  • OR Jre15.JRE15-IPF32 version is less than 1.5.0.28.00
  • OR Jre15.JRE15-IPF32-HS version is less than 1.5.0.28.00
  • OR Jre15.JRE15-IPF64 version is less than 1.5.0.28.00
  • OR Jre15.JRE15-IPF64-HS version is less than 1.5.0.28.00
  • OR Criteria meets HP Security Bulletin HPSBUX02867
  • platforms
  • HP-UX B.11.11
  • OR HP-UX B.11.23
  • AND filesets tests
  • Jdk15.JDK15-COM version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-DEMO version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-PA20 version is less than 1.5.0.28.00
  • OR Jdk15.JDK15-PA20W version is less than 1.5.0.28.00
  • OR Jre15.JRE15-COM version is less than 1.5.0.28.00
  • OR Jre15.JRE15-COM-DOC version is less than 1.5.0.28.00
  • OR Jre15.JRE15-PA20 version is less than 1.5.0.28.00
  • OR Jre15.JRE15-PA20-HS version is less than 1.5.0.28.00
  • OR Jre15.JRE15-PA20W version is less than 1.5.0.28.00
  • OR Jre15.JRE15-PA20W-HS version is less than 1.5.0.28.00
    • BACK