Authentication flaw

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

CVE-2014-7879

CVE-2014-7879 – HP-UX PAM bypass . Affected: HP-UX B.11.11, B.11.23, and B.11.31 when pam.conf uses libpam_updbe. Root cause: a flaw in pam_updbe handling allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors. CVSS base score in the HP bulle...

CVE-2014-2608

HP Smart Update Manager (SUM) for Windows (6.x, fixed in 6.4.1) and Linux (6.2.x–6.4.x, fixed in 6.4.1) is affected by CVE-2014-2608. The issue enables local disclosure of information and potential privilege escalation via unknown vectors. HP’s Security Bulletin HPSBMU03043 rev.1 notes the affect...

CVE-2014-7879

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors...

CVE-2014-2608

Unspecified vulnerability in HP Smart Update Manager 6.x before 6.4.1 on Windows, and 6.2.x through 6.4.x before 6.4.1 on Linux, allows local users to obtain sensitive information, and consequently gain privileges, via unknown vectors...

HP Network Node Manager i (NNMi) XSS (HPSBMU03035)

The version of HP Network Node Manager i NNMi installed on the remote host is a version that is potentially affected by an XSS vulnerability. Note that Nessus did not check for the presence of a patch. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79800;...

HP Network Node Manager i Remote Code Execution (HPSBMU03075)

The version of HP Network Node Manager i NNMi installed on the remote host is a version that is potentially affected by a remote code execution vulnerability. Note that Nessus did not check for the presence of a patch or workaround for this issue. C Tenable Network Security, Inc...

HP Network Node Manager i (NNMi) 8.x / 9.0x / 9.1x / 9.20 Unspecified XSS

According to its version number, the web interface for HP Network Node Manager i NNMi installed on the remote host is affected by an unspecified cross-site scripting vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79798; scriptversion"1.4";...

HP Network Node Manager i (NNMi) XSS (HPSBMU03035)

The version of HP Network Node Manager i NNMi installed on the remote host is a version that is potentially affected by an XSS vulnerability. Note that Nessus did not check for the presence of a patch. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid79799;...

HP SiteScope SSLv3 Padding Oracle On Downgraded Legacy Encryption Vulnerability (POODLE)

The version of HP SiteScope installed on the remote host is affected by a man-in-the-middle MitM information disclosure vulnerability known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining...

HP Network Node Manager I ovopi.dll Command 685 Memory Corruption (CVE-2014-2624)

A memory corruption vulnerability in HP Network Node Manager I NNMi ha been reported. The vulnerability is caused by using remotely supplied data as a pointer without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote unauthenticat...

HP Helion Cloud Development Platform restriction bypass

Same key is used in different installations...

[security bulletin] HPSBUX03166 SSRT101489 rev.1 - HP-UX running PAM libpam_updbe, Remote Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04511778 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04511778 Version: 1 HPSBUX03166...

HP-UX authentication bypass

HP-UX libpamupdbe authentication bypass...

[security bulletin] HPSBMU03190 rev.1 - HP Helion Cloud Development Platform Community and Commercial Editions, Remote Unauthenticated Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04500238 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04500238 Version: 1 HPSBMU03190 rev....

OracleVM 2.1 : udev (OVMSA-2009-0006)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. - fix fo...

HP-UX PHCO_43874 : s700_800 11.23 libpam_updbe cumulative patch

s700800 11.23 libpamupdbe cumulative patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEV...

HP-UX PHCO_43875 : s700_800 11.31 libpam_updbe patch

s700800 11.31 libpamupdbe patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEVEL 70300 C...

HP-UX PHCO_43873 : s700_800 11.11 libpam_updbe patch

s700800 11.11 libpamupdbe patch : A potential security vulnerability has been identified in the HP-UX running PAM using libpamupdbe in pam.conf4. This vulnerability could allow remote users to bypass certain authentication restrictions. References: CVE-2014-7879 SSRT101489. %NASLMINLEVEL 70300 C...

HP Performance Monitoring xglance Priv Esc

This exploit takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 'and subsequent' , which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating libraries in this location will...