PT-2004-3568 · Hewlett Packard · Hp Tru64 Unix

Published 2004-12-31 · Updated 2017-07-29 · CVE-2004-2678

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Tru64 UNIX versions 5.1A PK6(BL24) and 5.1B PK2(BL22) and PK3(BL24)

Description The issue concerns an unspecified vulnerability when using IPsec/IKE with Certificates, allowing remote attackers to gain privileges via unknown attack vectors.

Recommendations For HP Tru64 UNIX version 5.1A PK6(BL24), consider restricting access to IPsec/IKE with Certificates until a fix is available. For HP Tru64 UNIX version 5.1B PK2(BL22) and PK3(BL24), consider restricting access to IPsec/IKE with Certificates until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2678

Affected Products

Hp Tru64 Unix

References · 5

• http://securityfocus.com/bid/9803 · Vendor Advisory
• http://securitytracker.com/id?1009329 · Vendor Advisory
• http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2678 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15397 · Note