HP Insight Control for Linux Unspecified Local Privilege Escalation Vulnerability

Bugtraq ID:	39052
Class:	Unknown
CVE:	CVE-2010-1031
Remote:	No
Local:	Yes
Published:	Mar 30 2010 12:00AM
Updated:	Mar 30 2010 12:00AM
Credit:	HP
Vulnerable:	HP Insight Control for Linux (ICE-LX) 2.10 HP Insight Control 6.0
Not Vulnerable:

HP Insight Control for Linux Unspecified Local Privilege Escalation Vulnerability

HP Insight Control for Linux is prone to an unspecified local privilege-escalation vulnerability.

Attackers can leverage this issue to gain SYSTEM-level privileges. Successful exploits may compromise affected computers.

HP Insight Control for Linux 2.11 and prior are vulnerable.

HP Insight Control for Linux Unspecified Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Insight Control for Linux Unspecified Local Privilege Escalation Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.

HP Insight Control for Linux Unspecified Local Privilege Escalation Vulnerability

References:

• HP Insight Control suite for Linux Homepage (HP)
  
• [security bulletin] HPSBMA02513 SSRT090110 rev.1 - Insight Control for Linux (IC ([email protected])