I'n Blog 之萬象真藏

Secunia Advisory:	SA29552
Release Date:	2008-03-27
Critical:	Moderately critical
Impact:	DoS System access
Where:	From remote
Solution Status:	Vendor Patch
OS:	HP Tru64 UNIX 5.x
CVE reference:	CVE-2006-0705 (Secunia mirror)

Description:
HP has acknowledged a vulnerability in HP Tru64 UNIX, which potentially can be exploited by malicious users to compromise a vulnerable system.

For more information:
SA18828

The vulnerability affects SSH versions 3.2.0 and earlier running on HP Tru64 UNIX 5.1B-3 and 5.1B-4.

Solution:
Apply patches.

HP Tru64 UNIX Version v 5.1B-3:
Prerequisite: HP Tru64 UNIX v 5.1B-3 PK5 (BL26)
Name: T64KIT1001467-V51BB26-ES-20080314
http://www.itrc.hp.com/service/patch/...hid=T64KIT1001467-V51BB26-ES-20080314

HP Tru64 UNIX Version v 5.1B-4:
Prerequisite: HP Tru64 UNIX v 5.1B-4 PK6 (BL27)
Name: T64KIT1001460-V51BB27-ES-20080310
http://www.itrc.hp.com/service/patch/...hid=T64KIT1001460-V51BB27-ES-20080310

Original Advisory:
HPSBTU02322 SSRT080011:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01404118

Other References:
SA18828:
http://secunia.com/advisories/18828/

資料來源 http://secunia.com/advisories/29552/