[security bulletin] SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBUX01219 REVISION: 0 SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: 15 August 2005 POTENTIAL SECURITY...

CVE-2004-0951

The makerecovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information...

CVE-2004-0952

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the addnewclient command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption...

CVE-2000-0159

CVE-2000-0159 affects HP Ignite-UX. The issue: when imaging a trusted system, Ignite-UX does not save /etc/passwd, which can leave the password field blank and enable privilege escalation. The description and connected documents confirm the vulnerable component and the underlying behavior, but do...

CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...

CVE-2000-0159

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an attacker to gain privileges...