COMMAND

    kernel (ping)

SYSTEMS AFFECTED

    HP-UX 9.X and 10.X (HP9000 Series 700 and 800)

PROBLEM

    A vulnerability exists with certain ICMP echo requests (ping) that
    can cause an HP-UX system to  reboot.  External users can cause  a
    system to reboot.  Win95  or   WinNT  (below   4.0)  user    types
    'ping   -l     65510 host.running.hp'.   That machine reboots   OR
    freezes.

SOLUTION

    Apply the system  patches recommended by  HP. Apply the  following
    patch:

        Patch Name(Platform/OS)   | Notes
        --------------------------+----------------------------------
        PHNE_9027 (s700 9.01)     : PHNE_7704 must first be installed
        PHNE_9028 (s700 9.03/5/7) : PHNE_7252 must first be installed
        PHNE_9030 (s700 10.00)    :             No patch dependencies
        PHNE_9032 (s700 10.01)    : PHNE_8168 must first be installed
        PHNE_9034 (s700 10.10)    : PHNE_8063 must first be installed
        PHNE_9036 (s700 10.20)    :             No patch dependencies
        --------------------------+----------------------------------
        PHNE_8672 (s800 9.00)     : PHNE_7197 must first be installed
        PHNE_9029 (s800 9.04)     : PHNE_7317 must first be installed
        PHNE_9031 (s800 10.00)    :             No patch dependencies
        PHNE_9033 (s800 10.01)    : PHNE_8169 must first be installed
        PHNE_9035 (s800 10.10)    : PHNE_8064 must first be installed
        PHNE_9037 (s800 10.20)    :             No patch dependencies
        --------------------------+----------------------------------

    Due  to  the  critical  nature  of  this defect, HP is introducing
    this  as  a  non-cumulative  patch.   As  a result, in cases where
    a  dependency  exists,  the  current  ARPA  Transport   cumulative
    patch  will  need  to  be   installed  first.   The  two  can   be
    installed  in  the  same  session  to  minimize  system  downtime,
    but the  prerequisite patch  must be  loaded first.   Installation
    will fail if this is not the case.