HP StorageWorks Storage Mirroring Software Multiple Remote Vulnerabilities

Bugtraq ID:	34611
Class:	Unknown
CVE:	CVE-2009-0716 CVE-2009-0717 CVE-2009-0718
Remote:	Yes
Local:	No
Published:	Apr 20 2009 12:00AM
Updated:	Apr 21 2009 02:06PM
Credit:	Zhenhua Liu, Junfeng Jia, and Xiaopeng Zhang of Fortinet's Fortiguard Global Security Research Team
Vulnerable:	HP HP StorageWorks Storage Mirroring Software 5.1 HP HP StorageWorks Storage Mirroring Software 5.0
Not Vulnerable:	HP HP StorageWorks Storage Mirroring Software 5.1.1 .1090.15

HP StorageWorks Storage Mirroring Software Multiple Remote Vulnerabilities

HP StorageWorks Storage Mirroring Software (SWSM) is prone to multiple vulnerabilities. The issues include:

- a remote code-execution vulnerability
- a denial-of-service vulnerability
- an unauthorized-access vulnerability

These issues affect versions prior to SWSM 5.1.1.1090.15.

HP StorageWorks Storage Mirroring Software Multiple Remote Vulnerabilities

Currently we are not aware of any working exploits for the remote code-execution vulnerability. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Exploiting the denial-of-service and unauthorized-access vulnerabilities may be trivial and will not likely require complex exploit code.

HP StorageWorks Storage Mirroring Software Multiple Remote Vulnerabilities

Solution:
The vendor has released updates. Please see the references for more information.

HP StorageWorks Storage Mirroring Software Multiple Remote Vulnerabilities

References:

• HP StorageWorks Storage Mirroring Software Homepage (HP)