Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

HP-UX Update for OpenSSL HPSBUX02638

🗓️ 05 May 2011 00:00:00Reported by Copyright (C) 2011 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 49 Views

The remote host is missing an update for the OpenSSL package(s) allowing remote execution of arbitrary code, DoS, and authentication bypass

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: IBM Sterling Connect:Express for UNIX is affected by multiple vulnerabilities in OpenSSL
24 Jul 202022:49
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Tivoli Management Framework affected by vulnerabilities in OpenSSL versions prior to 1.0.0
25 Sep 202223:13
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Sterling Connect:Enterprise for UNIX is affected by multiple vulnerabilities in OpenSSL
25 Sep 202220:45
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Smart Analytics System 7600, 7700, and 7710 are affected by vulnerabilities in OpenSSL
25 Sep 202220:45
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Storage HMC OpenSSL upgrade to address cryptographic vulnerabilities.
18 Jun 201800:07
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are affected by multiple vulnerabilities in OpenSSL
25 Sep 202223:13
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000 and D5100 and IBM Smart Analytics System 1050, 2050, 5600 and 5710 are affected by vulnerabilities in OpenSSL
25 Sep 202223:13
–ibm
ibm
IBM Security Bulletins		Security Bulletin: IBM Tivoli Netcool System Service Monitors/Application Service Monitors is affected by multiple OpenSSL vulnerabilities
26 Sep 202205:45
–ibm
altlinux
ALT Linux		Security fix for the ALT Linux 6 package openssl10 version 1.0.0c-alt1
1 Feb 201100:00
–altlinux
altlinux
ALT Linux		Security fix for the ALT Linux 8 package openssl10 version 1.0.0b-alt1
16 Nov 201000:00
–altlinux
Rows per page
# SPDX-FileCopyrightText: 2011 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_xref(name:"URL", value:"http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02737002");
  script_oid("1.3.6.1.4.1.25623.1.0.835251");
  script_version("2026-04-28T06:28:06+0000");
  script_tag(name:"last_modification", value:"2026-04-28 06:28:06 +0000 (Tue, 28 Apr 2026)");
  script_tag(name:"creation_date", value:"2011-05-05 07:14:22 +0200 (Thu, 05 May 2011)");
  script_tag(name:"cvss_base", value:"7.6");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:H/Au:N/C:C/I:C/A:C");
  script_xref(name:"HPSBUX", value:"02638");
  script_cve_id("CVE-2010-3864", "CVE-2010-4180", "CVE-2010-4252");
  script_name("HP-UX Update for OpenSSL HPSBUX02638");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2011 Greenbone AG");
  script_family("HP-UX Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/hp_hp-ux", "ssh/login/hp_pkgrev", re:"ssh/login/release=HPUX(11\.31|11\.23|11\.11)");

  script_tag(name:"summary", value:"The remote host is missing an update for the OpenSSL package(s) announced via the referenced advisory.");

  script_tag(name:"impact", value:"Remote execution of arbitrary code Denial of Service (DoS) authentication bypass");

  script_tag(name:"affected", value:"OpenSSL on HP-UX B.11.11, B.11.23, B.11.31 running OpenSSL before vA.00.09.08q.");

  script_tag(name:"insight", value:"A potential security vulnerability has been identified with HP-UX OpenSSL.
  This vulnerability could be exploited remotely to execute arbitrary code or create a Denial of Service (DoS) or an authentication bypass.");

  script_tag(name:"solution", value:"Please install the updated package(s).");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"package");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-hpux.inc");

release = hpux_get_ssh_release();
if(!release) exit(0);

res = "";

if(release == "HPUX11.31")
{

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CER", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CONF", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-DOC", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-INC", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-LIB", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MAN", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MIS", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PRNG", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PVT", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-RUN", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-SRC", revision:"A.00.09.08q.003", rls:"HPUX11.31")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}


if(release == "HPUX11.23")
{

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CER", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CONF", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-DOC", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-INC", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-LIB", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MAN", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MIS", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PRNG", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PVT", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-RUN", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-SRC", revision:"A.00.09.08q.002", rls:"HPUX11.23")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}


if(release == "HPUX11.11")
{

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CER", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-CONF", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-DOC", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-INC", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-LIB", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MAN", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-MIS", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PRNG", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-PVT", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-RUN", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if ((res = ishpuxpkgvuln(pkg:"openssl.OPENSSL-SRC", revision:"A.00.09.08q.001", rls:"HPUX11.11")) != NULL)
  {
    security_message(data:res);
    exit(0);
  }

  if (__pkg_match) exit(99);
  exit(0);
}

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
28 Apr 2026 00:00Current
7.6High risk
Vulners AI Score7.6
CVSS 27.6
EPSS0.22145
hp-uxupdateopensslremote executionarbitrary codedenial of serviceauthentication bypass
49