BID:14737

HP OpenView Event Correlation Services Unspecified Remote Privilege Escalation Vulnerability

Info

HP OpenView Event Correlation Services Unspecified Remote Privilege Escalation Vulnerability

Bugtraq ID:	14737
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 05 2005 12:00AM
Updated:	Sep 05 2005 12:00AM
Credit:	This issue was discovered by David and Mark Litchfield of NGSSoftware.
Vulnerable:	HP OpenView Event Correlation Services 3.33 Windows HP OpenView Event Correlation Services 3.33 Solaris HP OpenView Event Correlation Services 3.33 Linux HP OpenView Event Correlation Services 3.33 HP-UX HP OpenView Event Correlation Services 3.32 Windows HP OpenView Event Correlation Services 3.32 Solaris HP OpenView Event Correlation Services 3.32 Linux HP OpenView Event Correlation Services 3.32 HP-UX HP OpenView Event Correlation Services 3.31 Windows HP OpenView Event Correlation Services 3.31 Solaris HP OpenView Event Correlation Services 3.31 Linux HP OpenView Event Correlation Services 3.31 HP-UX HP OpenView Event Correlation Services 3.20 Windows HP OpenView Event Correlation Services 3.20 Solaris HP OpenView Event Correlation Services 3.20 HP-UX HP OpenView Event Correlation Services 3.10 Windows HP OpenView Event Correlation Services 3.10 Solaris HP OpenView Event Correlation Services 3.10 HP-UX

Not Vulnerable:

Discussion

HP OpenView Event Correlation Services Unspecified Remote Privilege Escalation Vulnerability

HP OpenView Event Correlation Services is prone to an unspecified remote privilege escalation vulnerability.

NGSSoftware, who discovered this issue, will be providing additional information about the issue on January 9, 2006. This record will be updated when more information becomes available.

Exploit / POC

HP OpenView Event Correlation Services Unspecified Remote Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

HP OpenView Event Correlation Services Unspecified Remote Privilege Escalation Vulnerability

Solution:
HP has released security bulletin HPSBMA01225 dealing with this issue. HP advises all users to acquire the patches through HP Software Support Online; authentication is required to obtain the patches. Please see the referenced advisory for more information.

HP has updated security bulletin HPSBMA01225 SSRT051030 rev.1 addressing this issue. Please see the referenced advisory for further information.

HP OpenView Event Correlation Services 3.10 HP-UX