| Vulnerability Name: | CCN-13310 | ||||||
| Published: | 2003-09-15 | ||||||
| Updated: | 2003-09-15 | ||||||
| Summary: | Hewlett-Packard (formerly Compaq) Tru64 UNIX is vulnerable to a denial of service. By modifying the size of an AdvFS file, a remote attacker, from a non-Tru64 UNIX NFS client, could corrupt kernel memory and cause a denial of service to legitimate users. | ||||||
| CVSS v3 Severity: | 6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
| ||||||
| CVSS v2 Severity: | 6.4 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P)
| ||||||
| Vulnerability Consequences: | Denial of Service | ||||||
| References: | Source: CCN Type: HP Tru64 UNIX V5.1A PK5 BL23 Early Release Patch Advisory 20030915-01 Fix for possible memory corruption Source: CCN Type: HP Tru64 UNIX V5.1A PK4 BL21 Early Release Patch Advisory 20030915-02 Fix for possible memory corruption Source: CCN Type: HP Tru64 UNIX V5.1B PK2 BL22 Early Release Patch Advisory 20030915-03 Fix for possible memory corruption Source: CCN Type: BID-8614 HP Tru64 NFS AdvFS File Denial Of Service Vulnerability Source: XF Type: UNKNOWN tru64-advfs-memory-corruption(13310) | ||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
| BACK | |||||||