HP NonStop Server Unspecified Privilege Escalation Vulnerability

Bugtraq ID:	37181
Class:	Unknown
CVE:	CVE-2009-2686
Remote:	No
Local:	Yes
Published:	Dec 01 2009 12:00AM
Updated:	Dec 02 2009 03:54PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP NonStop Server J06.07.01 HP NonStop Server H06.18.01 HP NonStop Server H06.08 HP NonStop Server G06.32.0 HP NonStop Server G06.31.01 HP NonStop Server G06.31.00 HP NonStop Server G06.30.02 HP NonStop Server G06.30.01 HP NonStop Server G06.30.00 HP NonStop Server G06.29.02 HP NonStop Server G06.29.01 HP NonStop Server G06.29.00 HP NonStop Server G06.29 HP NonStop Server G06.28.00 HP NonStop Server G06.27.00 HP NonStop Server G06.26 HP NonStop Server G06.25 HP NonStop Server G06.24
Not Vulnerable:

HP NonStop Server Unspecified Privilege Escalation Vulnerability

HP NonStop Server is prone to an unspecified privilege-escalation scripting vulnerability.

Few technical details are available at this time; we will update this BID as more information emerges.

Local attackers may exploit this issue to obtain sensitive information, cause denial-of-service conditions, or execute arbitrary code with elevated privileges and compromise a computer.

HP NonStop Server Unspecified Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP NonStop Server Unspecified Privilege Escalation Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

HP NonStop Server Unspecified Privilege Escalation Vulnerability

References:

• HP NonStop Server Home Page (Hewlett-Packard )
  
• HPSBNS02475 SSRT090068 (HP)