----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
HP Tru64 UNIX IPsec Tunnel ESP Mode Encrypted Data Disclosure

SECUNIA ADVISORY ID:
SA16401

VERIFY ADVISORY:
http://secunia.com/advisories/16401/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
>From remote

OPERATING SYSTEM:
HP Tru64 UNIX 5.x
http://secunia.com/product/2/

DESCRIPTION:
HP has acknowledged a vulnerability in HP Tru64 UNIX, which can be
exploited by malicious people to disclose certain sensitive
information.

The vulnerability is caused due to an error in the IPsec tunnel ESP
mode implementation and can be exploited to disclose contents of an
encrypted packet by modifying parts of the IPsec packet and causing
the endpoint to reply with an ICMP error message containing portions
of the packet in plain text.

Successful exploitation requires that IPsec is used in ESP tunnel
mode without integrity protection (or integrity protection provided
by a higher layer).

The vulnerability affects the following supported versions:
* HP Tru64 UNIX 5.1B-3
* HP Tru64 UNIX 5.1B-2/PK4

SOLUTION:
Apply ERP kits.

HP Tru64 UNIX 5.1B-3:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT0026133-V51BB25-ES-20050801
MD5 checksum: b3b2031de3279c5243e8beee63dfe45b

HP Tru64 UNIX  5.1B-2/PK4:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT0026161-V51BB26-ES-20050804
MD5 checksum: 6c4f367937ddc0637e4faf341aab3514

Configure ESP to use both confidentiality and integrity protection.

PROVIDED AND/OR DISCOVERED BY:
NISCC

ORIGINAL ADVISORY:
HP SSRT5957:
http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTU01217

NISCC:
http://www.niscc.gov.uk/niscc/docs/al-20050509-00386.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------