HP-UX XFS Remote Unauthorized Access Vulnerability
BID:10790
Info
HP-UX XFS Remote Unauthorized Access Vulnerability
| Bugtraq ID: | 10790 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 23 2004 12:00AM |
| Updated: | Jul 23 2004 12:00AM |
| Credit: | This issue was disclosed in an HP advisory. |
| Vulnerable: |
HP HP-UX B.11.23 HP HP-UX B.11.22 HP HP-UX B.11.11 HP HP-UX B.11.00 Avaya Predictive Dialing System (PDS) 12.0 Avaya Predictive Dialing System (PDS) 11.0 Avaya Predictive Dialing System (PDS) 9.0 |
| Not Vulnerable: | |
Discussion
HP-UX XFS Remote Unauthorized Access Vulnerability
HP has reported an unauthorized access vulnerability in HP-UX. Specifically, this issue presents itself in HP-UX running 'xfs'. It is reported that an unspecified vulnerability in 'xfs' may allow a remote attacker to gain unauthorized access to a vulnerable computer.
Due to a lack of details, further information is not available at the moment. This issue may be related to other vulnerabilities, however this cannot be confirmed at the moment. This BID will be updated as more information becomes available.
HP-UX versions B11.00, B11.11, B.11.22, and B11.23 are vulnerable to this issue.
All Avaya PDS 9 and 11 platforms are vulnerable to this issue. Avaya PDS 12 platforms running on HP-UX 11.00 are vulnerable as well. PDS 12 versions running on HP-UX 11.11 are not vulnerable.
HP has reported an unauthorized access vulnerability in HP-UX. Specifically, this issue presents itself in HP-UX running 'xfs'. It is reported that an unspecified vulnerability in 'xfs' may allow a remote attacker to gain unauthorized access to a vulnerable computer.
Due to a lack of details, further information is not available at the moment. This issue may be related to other vulnerabilities, however this cannot be confirmed at the moment. This BID will be updated as more information becomes available.
HP-UX versions B11.00, B11.11, B.11.22, and B11.23 are vulnerable to this issue.
All Avaya PDS 9 and 11 platforms are vulnerable to this issue. Avaya PDS 12 platforms running on HP-UX 11.00 are vulnerable as well. PDS 12 versions running on HP-UX 11.11 are not vulnerable.
Exploit / POC
HP-UX XFS Remote Unauthorized Access Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP-UX XFS Remote Unauthorized Access Vulnerability
Solution:
HP has released an advisory (SSRT4773) to address this and another issue. HP has also released patch PHSS_31181 for HP-UX B.11.23, patch PHSS_3118 for HP-UX B.11.22, patch PHSS_31179 for HP-UX B.11.11, and patch PHSS_31178 for HP-UX B.11.00. Please see the referenced advisory for more information.
Avaya has released an advisory ASA-2005-032 to identify vulnerable versions of Avaya PDS. Avaya recommends applying fixes released by HP to address this issue. Please see the advisory in Web references for more information.
Solution:
HP has released an advisory (SSRT4773) to address this and another issue. HP has also released patch PHSS_31181 for HP-UX B.11.23, patch PHSS_3118 for HP-UX B.11.22, patch PHSS_31179 for HP-UX B.11.11, and patch PHSS_31178 for HP-UX B.11.00. Please see the referenced advisory for more information.
Avaya has released an advisory ASA-2005-032 to identify vulnerable versions of Avaya PDS. Avaya recommends applying fixes released by HP to address this issue. Please see the advisory in Web references for more information.
References
HP-UX XFS Remote Unauthorized Access Vulnerability
References:
References: