Design/Logic Flaw

Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2011-2411

Technical details about CVE-2011-2411 are not publicly available in the provided connected documents. Monitor for updates from vendors and security bulletins. The available sources reference an HP NonStop Samba vulnerability but do not disclose vectors or impact specifics.

CVE-2011-2411

Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute arbitrary code via unknown vectors...

PT-2011-3839

Name of the Vulnerable Software and Affected Versions HP NonStop Servers versions H06.x through H06.23.00 HP NonStop Servers versions J06.x through J06.12.00 Description The issue affects HP NonStop Servers when Samba is used, allowing remote authenticated users to execute arbitrary code. The exa...

Code injection

Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors...

CVE-2009-2686

Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors...

CVE-2009-2686

Technical details for CVE-2009-2686 are not publicly available in the provided documents. Monitor for updates on affected products, impact, and remediation.

CVE-2009-2686

Unspecified vulnerability in HP NonStop G06.12.00 through G06.32.00, H06.08.00 through H06.18.01, and J06.04.00 through J06.07.01 allows local users to gain privileges, cause a denial of service, or obtain "access to data" via unknown vectors...

CVE-2009-2678

Unspecified vulnerability in Open System Services OSS Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Open System Services OSS Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2009-2678

Technical details are not publicly available in the provided documents. Monitor for updates; the CVE entry shows generic information without specific affected components, versions, or remediation details.

CVE-2009-2678

Unspecified vulnerability in Open System Services OSS Name Server on HP NonStop G06.27, G06.28, G06.29, G06.30, H06.06, H06.07, H06.08, and J06.03 allows remote attackers to obtain sensitive information via unknown vectors...

Design/Logic Flaw

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."...

CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1–5.3.1 on HP NonStop and Tandem NSK allows local users to bypass access restrictions for administrative tasks via runmqsc, without requiring mqm group membership (Pathway panels). Impact is partial confidentiality, integrity, and availability. No explicit remed...

CVE-2008-1592

MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to "Pathway panels."...

IBM WebSphere MQ for HP NonStop缺少访问认证漏洞

BUGTRAQ ID: 28235 IBM WebSphere MQ用于在企业中提供消息传输服务。 WebSphere MQ处理访问验证时存在漏洞，在MQSeries for NonStop V5.1中，非mqm组的用户可以使用Pathway面板和runmqsc启动和停止信道，或执行其他管理任务， IBM WebSphere MQ for HP NonStop 5.3.1 IBM WebSphere MQ for HP NonStop 5.3 IBM WebSphere MQ for HP NonStop 5.1 厂商补丁： IBM ---...

CVE-2006-5704

HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files...

CVE-2006-5704

HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files...

CVE-2006-5704

Technical details about CVE-2006-5704 are not publicly provided in the supplied documents. Please monitor for updates from official advisories.

HP NonStop Server非授权目录访问漏洞

惠普NonStop是一款容错服务器，可进行全面的故障检测和隔离，并保护数据的完整性。 NonStop服务器在处理目录访问权限时存在漏洞，本地攻击者可能利用此漏洞获取非授权访问。 在运行G06.29的HP NonStop Server上，如果没有分配可选的访问控制列表（ACL）项的话，就无法正确的评估目录权限。这可能对OSS目录造成安全漏洞，可能导致非授权的本地访问。 HP NonStop Server G06.29 临时解决方法： 首先备份2版本的文件组并升级到3版本： SCF DIAGNOSE FILESET $ZPMON.fileset, UPGRADE...