HP-UX FTP Server Unspecified Restricted File Access Vulnerability

Bugtraq ID:	12651
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 23 2005 12:00AM
Updated:	Feb 23 2005 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.22 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00
Not Vulnerable:

HP-UX FTP Server Unspecified Restricted File Access Vulnerability

It is reported that the FTP server included with HP-UX is prone to an unspecified vulnerability that may be leveraged by authenticated users to access restricted files.

A remote attacker that can authenticate to the affected service may exploit this vulnerability to access restricted files.

HP-UX FTP Server Unspecified Restricted File Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP-UX FTP Server Unspecified Restricted File Access Vulnerability

Solution:
The vendor has released an advisory (HPSBUX01119) and updates to address this vulnerability. Customers are advised to peruse the referenced advisory for information in regards to obtaining and applying appropriate fixes.

HP-UX FTP Server Unspecified Restricted File Access Vulnerability

References: