----------------------------------------------------------------------

To improve our services to our customers, we have made a number of
additions to the Secunia Advisories and have started translating the
advisories to German.

The improvements will help our customers to get a better
understanding of how we reached our conclusions, how it was rated,
our thoughts on exploitation, attack vectors, and scenarios.

This includes:
* Reason for rating
* Extended description
* Extended solution
* Exploit code or links to exploit code
* Deep links

Read the full description:
http://corporate.secunia.com/products/48/?r=l

Contact Secunia Sales for more information:
http://corporate.secunia.com/how_to_buy/15/?r=l

----------------------------------------------------------------------

TITLE:
HP Tru64 UNIX gzip Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA22661

VERIFY ADVISORY:
http://secunia.com/advisories/22661/

CRITICAL:
Moderately critical

IMPACT:
DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
HP Tru64 UNIX 5.x
http://secunia.com/product/2/
HP Tru64 UNIX 4.x
http://secunia.com/product/6/

DESCRIPTION:
HP has acknowledged some vulnerabilities in HP Tru64 Unix, which can
be exploited by malicious people to cause a DoS (Denial of Service)
and potentially compromise a vulnerable system.

For more information:
SA21996

The vulnerabilities are reported in the following versions:
* HP Tru64 UNIX 5.1B-3 running gzip, gunzip, and gzcat
* HP Tru64 UNIX 5.1B-2/PK4 running gzip, gunzip, and gzcat
* HP Tru64 UNIX 5.1A PK6 running gzip, gunzip, and gzcat
* HP Tru64 UNIX 4.0G PK4 running gzip and gunzip
* HP Tru64 UNIX 4.0F PK8 running gzip and gunzip

SOLUTION:
Apply ERPs.

HP Tru64 UNIX Version 5.1B-3 ERP Kit:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000947-V51BB26-ES-20061011
Name:T64KIT1000947-V51BB26-ES-20061011.tar
MD5 Checksum: 2fc26d4d30da326fde68525681f33545

HP Tru64 UNIX Version 5.1B-2/PK4 ERP Kit:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000948-V51BB25-ES-20061011
Name: T64KIT1000948-V51BB25-ES-20061011.tar
MD5 Checksum: 9b43e88360d19810ba7bf90b48561a8a

HP Tru64 UNIX Version 5.1A PK6 ERP Kit:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000949-V51AB24-ES-20061011
Name: T64KIT1000949-V51AB24-ES-20061011.tar
MD5 Checksum: 93e6893b5e05d6f5429e757eb84071ad

HP Tru64 UNIX Version 4.0G PK4 ERP Kit:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT1000950-V40GB22-ES-20061011
Name: T64KIT1000950-V40GB22-ES-20061011.tar
MD5 Checksum: 7d72d0b7367c7cb1d0bd25ffb5b5a908

HP Tru64 UNIX Version 4.0F PK8 ERP Kit:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=DUXKIT1000951-V40FB22-ES-20061011
Name: DUXKIT1000951-V40FB22-ES-20061011.tar
MD5 Checksum: 9ef43444f4f82f563f3e2f476ef3eef1

ORIGINAL ADVISORY:
HPSBTU02168 SSRT061237:
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00797077

OTHER REFERENCES:
SA21996:
http://secunia.com/advisories/21996/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------