PT-2000-1875 · Hewlett Packard+2 · Vvos Hp-Ux+2

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0965

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP-UX VVOS versions 10.24 through 11.04

Description The issue allows an attacker to cause a denial of service, resulting in high CPU utilization, by exploiting the NSAPI plugins for TGA and the Java Servlet proxy in the affected system.

Recommendations For HP-UX VVOS versions 10.24 through 11.04, consider disabling the NSAPI plugins for TGA and the Java Servlet proxy as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2000-0965

Affected Products

Vvos Hp-Ux

Java Servlet

Nsapi

References · 3

• http://archives.neohapsis.com/archives/hp/2000-q4/0012.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0965 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5361 · Note