HP-UX Veritas File System Unauthorized Data Access Vulnerability

Bugtraq ID:	14663
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Aug 25 2005 12:00AM
Updated:	Aug 25 2005 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00
Not Vulnerable:

HP-UX Veritas File System Unauthorized Data Access Vulnerability

HP-UX is affected by a vulnerability that may allow local unauthorized users to access potentially sensitive data.

This vulnerability presents itself in HP-UX systems running the Veritas File System (VxFS).

A successful attack may disclose sensitive information and aid in other attacks against a vulnerable computer.

HP-UX Veritas File System Unauthorized Data Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP-UX Veritas File System Unauthorized Data Access Vulnerability

Solution:
HP has released advisory HPSBUX01218 (SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access) to address this issue. Please see the referenced advisory for more information.

HP-UX Veritas File System Unauthorized Data Access Vulnerability

References: