Hewlett-Packard Insight Diagnostics Unspecified Unauthorized Access Vulnerability

Bugtraq ID:	31479
Class:	Unknown
CVE:	CVE-2008-3542
Remote:	Yes
Local:	No
Published:	Sep 29 2008 12:00AM
Updated:	Oct 27 2008 05:56PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP Insight Diagnostics 7.9
Not Vulnerable:	HP Insight Diagnostics 7.9.1 2402

Hewlett-Packard Insight Diagnostics Unspecified Unauthorized Access Vulnerability

Hewlett-Packard Insight Diagnostics is prone to an unspecified unauthorized-access issue.

Very few technical details are currently available. We will update this BID as more information emerges.

Hewlett-Packard Insight Diagnostics Unspecified Unauthorized Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hewlett-Packard Insight Diagnostics Unspecified Unauthorized Access Vulnerability

Solution:
The vendor has addressed this issue in Insight Diagnostics 7.9.1 (for Linux) and 8.0.0 (for Windows). Contact the vendor for details on obtaining and applying the appropriate updates.

Hewlett-Packard Insight Diagnostics Unspecified Unauthorized Access Vulnerability

References:

• Insight Diagnostics Homepage (HP)
  
• [security bulletin] HPSBMA02373 SSRT071467 rev.1 - HP Insight Diagnostics, Remot ([email protected])