Posted by Ian on Tuesday September 23 2008 @ 03:49AM EDT
HP have posted information and fixes for the finger service and cache poisoning vulnerabilities which have been reported for recent versions of the HP TCP/IP Services for OpenVMS product
The finger software has a vulnerability only when the service is enabled, which it often is not.
Some HP TCP/IP versions contain a DNS cache poisoning vulnerability. If your system is not acting as a nameserver you do not need the updated images.
A description of the vulnerabilities, workarounds and updated images which fix the problem are available on the HP OpenVMS Networking What's New page
SpyderByte.com:
SpyderByte.com
