HP-UX PHNE_35351 : s700_800 11.11 cumulative ARPA Transport patch

s700800 11.11 cumulative ARPA Transport patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running TCP/IP IPv4. This vulnerability could be remotely exploited to cause a Denial of Service DoS. HPSBUX01137...

HP-UX PHCO_35587 : HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS) (HPSBUX02195 SSRT061237 rev.1)

s700800 11.11 Software Distributor Cumulative Patch : A potential security vulnerability has been identified with the version of GZIP delivered by HP-UX Software Distributor SD. The vulnerability could be remotely exploited leading to a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHSS_35113 : s700_800 11.X OV NNM6.2 Intermediate Patch 19

s700800 11.X OV NNM6.2 Intermediate Patch 19 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute arbitrary...

HP-UX PHSS_36385 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)

s700800 11.X PA-RISC OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of...

HP-UX PHNE_35920 : HP-UX Running BIND, Remote Denial of Service (DoS) (HPSBUX02219 SSRT061273 rev.1)

s700800 11.23 Bind 9.2.0 components : Potential vulnerabilities have been identified with HP-UX running BIND. The vulnerabilities could be exploited remotely to create a Denial of Service DoS. References: CVE-2006-4339, CVE-2007-0493 BIND v9.3.2 only, CVE-2007-0494. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHSS_34870 : s700_800 11.X OV NNM7.50 PA RISC Consolidated Patch 4

s700800 11.X OV NNM7.50 PA RISC Consolidated Patch 4 : A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to gain read access to files with the permissions of the NNM server...

HP-UX PHNE_35484 : s700_800 11.11 sendmail(1M) 8.9.3 patch

s700800 11.11 sendmail1M 8.9.3 patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References:...

HP-UX PHSS_34389 : HP-UX Running Xserver, Local Denial of Service (DoS) (HPSBUX02225 SSRT071295 rev.1)

s700800 11.11 Xserver cumulative patch : Potential security vulnerabilities have been identified with HP-UX running Xserver. These vulnerabilities could be exploited by a local user to create a Denial of Service DoS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

HP-UX PHSS_35164 : HP OpenView Storage Data Protector, Local Execution of Arbitrary Code (HPSBMA02190 SSRT071300 rev.1)

s700800 11.X OV DP5.50 PA-RISC patch - DA packet : A potential security vulnerability has been identified with HP OpenView Storage Data Protector running on HP-UX with PHSS35149 or PHSS35150 installed and Solaris with DPSOL00229 installed. The vulnerability could be exploited by a local user to...

Design/Logic Flaw

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...

CVE-2007-5008

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...

CVE-2007-5008

The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected...

CVE-2007-5008

HP-UX vulnerability CVE-2007-5008 affects logins(1M) on HP-UX B.11.31, B.11.23, and B.11.11 where the command incorrectly reports password status, allowing remote attackers to obtain privileges when certain password issues are not detected. Impact is remote unauthorized access / potential privile...

Command injection

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...

CVE-2007-4590

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...

CVE-2007-4590

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk DRD A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors...

CVE-2007-4590

CVE-2007-4590 affects HP-UX environments where Ignite-UX (C.7.0–C.7.3) and DynRootDisk (DRD) (A.1.0.16.417–A.2.0.0.592) are used. The get_system_info command on HP-UX B.11.11/11.23/11.31 does not inform local users of networking changes it makes, with impact and attack vectors not clearly defined...

HP-UX get_system_info工具非授权更改配置漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 Ignite-UX和DynRootDisk系统的getsysteminfo工具实现上存在漏洞，本地攻击者可能利用此漏洞非授权更改系统网络参数。 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02249）以及相应补丁: HPSBUX02249：SSRT071442 rev.1 HP-UX Running the Ignite-UX or the DynRootDisk DRD getsysteminfo Command, Local...

HP-UX get_system_info privilege escalation

It's possible to change system configuration with getsysteminfo if Ignite-UX or the DynRootDisk DRD are installed...

HPSBMA02236 SSRT061260 rev.1 - HP OpenView Performance Manager (OVPM) Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01109171 Version: 1 HPSBMA02236 SSRT061260 rev.1 - HP OpenView Performance Manager OVPM Running Shared Trace Service on HP-UX, Solaris, and Windows, Remote Arbitrary Code Execution NOTICE: The...