Security Advisory Issued for HP SSL v1.3 for OpenVMS

On June 16, 2010 the Hewlett-Packard (HP) Software Security Response Team announced that a potential security vulnerability has been identified with HP SSL for OpenVMS. The vulnerabilities could be remotely exploited resulting in unauthorized data injection or a Denial of Service (DoS).

Affected HP SSL for HP OpenVMS:

HP SSL v 1.3 for OpenVMS (v 8.2 or higher) and Integrity (v 8.2-1 or higher).

The following patch kits have been made available by HP to resolve the issue:

   HP SSL v 1.4 for OpenVMS Alpha and Integrity

SCI Remote Managed Services Customers: Your TAM has already contacted you regarding this vulnerability.

All Others:  Patches are available for download at http://itrc.hp.com, or contact SCI for assistance in installing these patches.

Read full HP security bulletin (ITRC Login Required)