HP-UX Ignite-UX Remote Unauthorized Access and Privilege Escalation Vulnerabilities

Bugtraq ID:	20269
Class:	Unknown
CVE:	CVE-2006-5151
Remote:	Yes
Local:	No
Published:	Sep 29 2006 12:00AM
Updated:	Jun 26 2007 04:28PM
Credit:	The vendor has disclosed this issue.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00 Avaya Predictive Dialer (PDS) APC 3.0 Avaya Predictive Dialer 0
Not Vulnerable:

HP-UX Ignite-UX Remote Unauthorized Access and Privilege Escalation Vulnerabilities

HP-UX is prone to a remote unauthorized access and privilege-escalation vulnerabilities.

Exploiting this issue allows remote attackers to access restricted information or to gain administrative privileges on affected computers. This facilitates the complete compromise of affected computers.

Few technical details are currently available. We will update this BID as more information emerges.

HP-UX Ignite-UX Remote Unauthorized Access and Privilege Escalation Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

HP-UX Ignite-UX Remote Unauthorized Access and Privilege Escalation Vulnerabilities

Solution:
HP has released an advisory along with fixes to address this issue. Please see the referenced advisory for information on obtaining and applying fixes.

HP-UX Ignite-UX Remote Unauthorized Access and Privilege Escalation Vulnerabilities

References:

• ASA-2006-214 - HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remo (Avaya)
  
• HP-UX Homepage (HP)