HP-UX Trusted System Unspecified Remote Unauthorized Access Vulnerability

Bugtraq ID:	13774
Class:	Unknown
CVE:	CVE-2005-1771
Remote:	Yes
Local:	No
Published:	May 26 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Reported by the vendor.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.22 HP HP-UX B.11.11 HP HP-UX B.11.00 Avaya Predictive Dialing System (PDS) 12.0
Not Vulnerable:

HP-UX Trusted System Unspecified Remote Unauthorized Access Vulnerability

HP-UX Trusted System is affected by an unspecified remote unauthorized access vulnerability. The specific details about this issue were not released therefore; the cause of this issue is currently unknown.

HP-UX B.11.00, B.11.11, B.11.22, B.11.23 systems that have been converted to Trusted Systems are affected by this issue.

This BID will be updated when more details are available.

HP-UX Trusted System Unspecified Remote Unauthorized Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP-UX Trusted System Unspecified Remote Unauthorized Access Vulnerability

Solution:
HP has released advisory HPSBUX01165 (SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access) to address this issue. Patches for HP-UX B.11.00, B.11.11, B.11.23 are available.

Avaya has released advisory ASA-2005-169 detailing vulnerable Avaya products. Please see the referenced advisory for further information.


HP HP-UX B.11.11

• HP PHCO_33215
  http://itrc.hp.com

HP HP-UX B.11.23

• HP PHCO_32926
  http://itrc.hp.com

HP HP-UX B.11.00

• HP PHCO_29249 and PHNE_17030
  http://itrc.hp.com

HP-UX Trusted System Unspecified Remote Unauthorized Access Vulnerability

References:

• ASA-2005-169 - HP-UX HP-UX trusted system remote unauthorized access (HPSBUX0116 (Avaya)