HP OpenView Network Node Manager Config Scripts Vulnerability

Bugtraq ID:	1682
Class:	Unknown
CVE:
Remote:	Unknown
Local:	Unknown
Published:	Sep 12 2000 12:00AM
Updated:	Sep 12 2000 12:00AM
Credit:	Vulnerability announced in HP Advisory HPSBUX0009-120.
Vulnerable:	HP OpenView Network Node Manager 6.1 Solaris - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 - Sun Solaris 2.5 - Sun Solaris 2.4 HP OpenView Network Node Manager 6.1 HP-UX 11.X - HP HP-UX 11.0 4 - HP HP-UX 11.0 HP OpenView Network Node Manager 6.1 HP-UX 10.X - HP HP-UX 10.34 - HP HP-UX 10.30 - HP HP-UX 10.20 - HP HP-UX 10.16 - HP HP-UX 10.10 - HP HP-UX 10.9 - HP HP-UX 10.8 - HP HP-UX 10.1 0 - HP HP-UX 10.0 1 - HP HP-UX 10.0 - HP HP-UX (VVOS) 10.24 HP OpenView Network Node Manager 5.0 1 Solaris - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 - Sun Solaris 2.5 - Sun Solaris 2.4 HP OpenView Network Node Manager 5.0 1 HP-UX - HP HP-UX 10.34 - HP HP-UX 10.30 - HP HP-UX 10.20 - HP HP-UX 10.16 - HP HP-UX 10.10 - HP HP-UX 10.9 - HP HP-UX 10.8 - HP HP-UX 10.1 0 - HP HP-UX 10.0 1 - HP HP-UX 10.0 - HP HP-UX (VVOS) 10.24 HP OpenView Network Node Manager 4.1 1 Solaris - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 - Sun Solaris 2.5 - Sun Solaris 2.4 HP OpenView Network Node Manager 4.1 1 HP-UX - HP HP-UX 10.34 - HP HP-UX 10.30 - HP HP-UX 10.20 - HP HP-UX 10.16 - HP HP-UX 10.10 - HP HP-UX 10.9 - HP HP-UX 10.8 - HP HP-UX 10.1 0 - HP HP-UX 10.0 1 - HP HP-UX 10.0 - HP HP-UX (VVOS) 10.24
Not Vulnerable:

HP OpenView Network Node Manager Config Scripts Vulnerability

According to an HP advisory (HPSBUX0009-120), the database configuration scripts bundled with OpenView NNM are not sufficiently secure and allow users with a login to obtain unauthorized privileges.

HP OpenView Network Node Manager Config Scripts Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

HP OpenView Network Node Manager Config Scripts Vulnerability


HP OpenView Network Node Manager 4.1 1 Solaris

• HP PSOV_02803
  http://ovweb.external.hp.com/cpe/patches/nnm/4.1x/sparc_2.X.html

HP OpenView Network Node Manager 4.1 1 HP-UX

• HP PHSS_22247
  http://ovweb.external.hp.com/cpe/patches/nnm/4.1x/s700_800_10.X.html

HP OpenView Network Node Manager 5.0 1 HP-UX

• HP PHSS_22246
  http://ovweb.external.hp.com/cpe/patches/nnm/5.0x/s700_800_10.X.html

HP OpenView Network Node Manager 5.0 1 Solaris

• HP PSOV_02802
  http://ovweb.external.hp.com/cpe/patches/nnm/5.0x/sparc_2.X.html

HP OpenView Network Node Manager 6.1 HP-UX 10.X

• HP PHSS_22240
  http://ovweb.external.hp.com/cpe/patches/nnm/6.1/s700_800_10.X.html

HP OpenView Network Node Manager 6.1 HP-UX 11.X

• HP PHSS_22241
  http://ovweb.external.hp.com/cpe/patches/nnm/6.1/s700_800_11.X.html

HP OpenView Network Node Manager 6.1 Solaris

• HP PSOV_02800
  http://ovweb.external.hp.com/cpe/patches/nnm/6.1/sparc_2.X.html

HP OpenView Network Node Manager Config Scripts Vulnerability

References:

• OpenView Homepage (HP)