ID CVE-2005-4316
Summary HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
References
Vulnerable Configurations
  • cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*
CVSS
Base: 7.8 (as of 19-10-2018 - 15:40)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
oval via4
accepted 2014-03-24T04:01:46.494-04:00
class vulnerability
contributors
  • name Michael Wood
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
description HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
family unix
id oval:org.mitre.oval:def:5760
status accepted
submitted 2008-07-07T16:38:36.000-04:00
title HP-UX running TCP/IP Remote Denial of Service (DoS)
version 37
refmap via4
bid 11258
bugtraq 20040927 IPv4 fragmentation --> The Rose Attack
confirm http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm
hp
  • HPSBUX02087
  • SSRT4728
sectrack 1015361
secunia
  • 18082
  • 19086
vupen ADV-2005-2945
Last major update 19-10-2018 - 15:40
Published 17-12-2005 - 11:03
Back to Top