[security bulletin] HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02026642 Version: 1 HPSBUX02509 SSRT100032 rev.1 - HP-UX Running NFS/ONCplus, NFS Inadvertently Enabled NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2010-0451

The CVE-2010-0451 issue affects HP-UX B.11.31 with NFS/ONCplus, where the installation process can set NFS_SERVER to enabled in /etc/rc.config.d/nfsconf, potentially allowing remote attackers to access files via NFS. Public docs identify HP-UX B.11.31_08 or earlier as affected; HP’s Security Bull...