HP Storage Essentials SRM Unspecified Remote Unauthorized Access Vulnerability

Bugtraq ID:	27643
Class:	Access Validation Error
CVE:	CVE-2008-0215
Remote:	Yes
Local:	No
Published:	Feb 06 2008 12:00AM
Updated:	Feb 08 2008 03:06PM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP Storage Essentials SRM Standard 0 HP Storage Essentials SRM Enterprise 0
Not Vulnerable:	HP Storage Essentials SRM Standard 6.0 HP Storage Essentials SRM Enterprise 6.0

HP Storage Essentials SRM Unspecified Remote Unauthorized Access Vulnerability

HP Storage Essentials SRM (Storage Resource Management) is prone to an unauthorized-access vulnerability.

An attacker can exploit this issue to gain remote unauthorized access to affected computers.

Versions prior to Storage Essentials SRM Standard and Enterprise 6.0.0 are vulnerable.

HP Storage Essentials SRM Unspecified Remote Unauthorized Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Storage Essentials SRM Unspecified Remote Unauthorized Access Vulnerability

Solution:
The vendor has released fixes for this issue. Please see the referenced advisory for more information.

HP Storage Essentials SRM Unspecified Remote Unauthorized Access Vulnerability

References:

• HP Storage Essentials Storage Resource Management Standard Edition Software - Ov (HP)
  
• [security bulletin] HPSBST02302 SSRT071474 rev.1 - HP Storage Essentials SRM, Re ([email protected] )