HP NonStop Server Unauthorized Data Access Vulnerability

Bugtraq ID:	36981
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2009 12:00AM
Updated:	Nov 12 2009 04:06PM
Credit:	HP
Vulnerable:	HP NonStop Server J06.03 HP NonStop Server H06.08 HP NonStop Server H06.07 HP NonStop Server H06.06 HP NonStop Server G06.32.0 HP NonStop Server G06.31.01 HP NonStop Server G06.31.00 HP NonStop Server G06.30.01 HP NonStop Server G06.30.00 HP NonStop Server G06.29.02 HP NonStop Server G06.29.00 HP NonStop Server G06.28.00 HP NonStop Server G06.27.00
Not Vulnerable:

HP NonStop Server Unauthorized Data Access Vulnerability

HP NonStop Server is prone to a remote unauthorized-access vulnerability.

Attackers can exploit this issue to obtain unauthorized access to data, which may lead to further attacks.

HP NonStop Server Unauthorized Data Access Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP NonStop Server Unauthorized Data Access Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for details.

HP NonStop Server Unauthorized Data Access Vulnerability

References:

• HP Integrity NonStop computing (HP)