CVE-2000-0095: Medium severity HPE HP-UX vulnerability
The PMTU discovery procedure used by HP-UX 10.30 and 11.00 for determining the optimum MTU generates large amounts of traffic in response to small packets, allowing remote attackers to cause the system to be used as a packet amplifier.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable Path MTU (PMTU) discovery on affected HP-UX systems (10.30 and 11.00) to prevent the system from generating large amounts of traffic in response to small packets. Consult HP-UX system/network configuration documentation or vendor support for the exact commands/procedure to disable PMTU discovery on your platform.
HPE HP-UX (10.30, 11.00) network stack Path MTU (PMTU) discovery = disabled - Compensating control
Apply network-level mitigations to prevent abuse as a packet amplifier: implement firewall/ACL rules or rate-limiting at network edge to block or throttle traffic patterns that trigger PMTU responses (e.g., unsolicited small packets that elicit large outbound traffic), and restrict incoming traffic from untrusted sources until a vendor patch or permanent fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0095?
CVE-2000-0095 is categorized as a medium severity vulnerability due to its potential for creating excessive network traffic.
How do I fix CVE-2000-0095?
To mitigate CVE-2000-0095, consider disabling PMTU discovery or applying necessary patches from HP.
What systems are affected by CVE-2000-0095?
CVE-2000-0095 affects HP-UX versions 10.30 and 11.00.
What type of attack does CVE-2000-0095 facilitate?
CVE-2000-0095 allows remote attackers to exploit the PMTU discovery mechanism for amplification attacks.
Is CVE-2000-0095 still a concern for modern systems?
CVE-2000-0095 primarily impacts legacy HP-UX systems, so its relevance may be limited in contemporary environments.