Multiple HP ProCurve Products Unspecified Remote Privilege Escalation Vulnerability

Bugtraq ID:	44099
Class:	Unknown
CVE:	CVE-2010-3287
Remote:	Yes
Local:	No
Published:	Oct 13 2010 12:00AM
Updated:	Oct 13 2010 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	HP Multi Service Access Point Miltope nMAP (J9402A) 0 HP MSM765zl Mobility Controller (J9370A) 0 HP MSM760 Mobility Controller (J9420A) 5.3.5 HP MSM760 Access Controller (J9421A) 5.4.0 HP MSM750 Mobility Controller (J9327A) 0 HP MSM750 Access Controller (J9330A) 0 HP MSM730 Mobility Controller (J9326A) 0 HP MSM730 Access Controller (J9329A) 0 HP MSM710 Mobility Controller (J9325A) 0 HP MSM710 Access Controller (J9328A) 0 HP MSM422 Access Point WW (J9359A) 0 HP MSM422 Access Point US (J9358B) 0 HP MSM422 Access Point US (J9358A) 0 HP MSM422 Access Point JP (J9530B) 0 HP MSM422 Access Point JP (J9530A) 0 HP MSM410 Access Point WW (J9427B) 0 HP MSM410 Access Point WW (J9427A) 0 HP MSM410 Access Point US (J9426B) 0 HP MSM410 Access Point US (J9426A) 0 HP MSM410 Access Point JP (J9529A) 0 HP MSM410 Access Point JP (J9429B) 0 HP MSM335 Access Point WW (J9357B) 0 HP MSM335 Access Point WW (J9357A) 0 HP MSM335 Access Point US (J9356B) 0 HP MSM335 Access Point US (J9356A) 0 HP MSM325 Access Point WW (J9373B) 0 HP MSM325 Access Point WW (J9373A) 0 HP MSM325 Access Point US (J9369B) 0 HP MSM325 Access Point US (J9369A) 0 HP MSM320-R Access Point WW (J9368B) 0 HP MSM320-R Access Point WW (J9368A) 0 HP MSM320-R Access Point US (J9365B) 0 HP MSM320-R Access Point US (J9365A) 0 HP MSM320-R Access Point JP (J9528B) 0 HP MSM320-R Access Point JP (J9528A) 0 HP MSM320 Access Point WW (J9364B) 0 HP MSM320 Access Point WW (J9364A) 0 HP MSM320 Access Point US (J9360B) 0 HP MSM320 Access Point US (J9360A) 0 HP MSM320 Access Point JP (J9527B) 0 HP MSM320 Access Point JP (J9527A) 0 HP MSM310-R Access Point WW (J9383B) 0 HP MSM310-R Access Point WW (J9383A) 0 HP MSM310-R Access Point US (J9380B) 0 HP MSM310-R Access Point US (J9380A) 0 HP MSM310 Access Point WW (J9379B) 0 HP MSM310 Access Point WW (J9379A) 0 HP MSM310 Access Point US (J9374B) 5.1.9 HP MSM310 Access Point US (J9374A) 5.1.9 HP MSM310 Access Point JP (J9524B) 0 HP MSM310 Access Point JP (J9524A) 0 HP Miltope Dual Radio Access Point (J9410A) 0 HP M110 Access Point US (J9385B) 5.4 HP M110 Access Point US (J9385A) 5.4
Not Vulnerable:

Multiple HP ProCurve Products Unspecified Remote Privilege Escalation Vulnerability

HP ProCurve Access Points, Access Controllers, and Mobility Controllers are prone to an unspecified remote privilege-escalation vulnerability.

Few technical details are available at this time; we will update this BID as more information emerges.

The following products are affected:

M110 Access Point US (J9385B, J9385A)
M110 Access Point WW (J9388B, J9388A)
MSM310 Access Point US (J9374B, J9374A)
MSM310 Access Point WW (J9379B, J9379A)
MSM310 Access Point JP (J9524B, J9524A)
MSM310-R Access Point US (J9380B, J9380A)
MSM310-R Access Point WW (J9383B, J9383A)
MSM320 Access Point US (J9360B, J9360A)
MSM320 Access Point WW (J9364B, J9364A)
MSM320 Access Point JP (J9527B, J9527A)
MSM320-R Access Point US (J9365B, J9365A)
MSM320-R Access Point WW (J9368B, J9368A)
MSM320-R Access Point JP (J9528B, J9528A)
MSM325 Access Point US (J9369B, J9369A)
MSM325 Access Point WW (J9373B, J9373A)
MSM335 Access Point US (J9356B, J9356A)
MSM335 Access Point WW (J9357B, J9357A)
MSM410 Access Point US (J9426B, J9426A)
MSM410 Access Point WW (J9427B, J9427A)
MSM410 Access Point JP (J9429B, J9529A)
MSM422 Access Point US (J9358B, J9358A)
MSM422 Access Point WW (J9359B, J9359A)
MSM422 Access Point JP (J9530B, J9530A)
Miltope Dual Radio Access Point (J9410A)
Multi Service Access Point Miltope nMAP (J9402A)
MSM710 Mobility Controller (J9325A)
MSM710 Access Controller (J9328A)
MSM730 Mobility Controller (J9326A)
MSM730 Access Controller (J9329A)
MSM750 Mobility Controller (J9327A)
MSM750 Access Controller (J9330A)
MSM760 Mobility Controller (J9420A)
MSM760 Access Controller (J9421A)
MSM765zl Mobility Controller (J9370A)

Multiple HP ProCurve Products Unspecified Remote Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple HP ProCurve Products Unspecified Remote Privilege Escalation Vulnerability

Solution:
The vendor has released updates. Please see the references for details.

Multiple HP ProCurve Products Unspecified Remote Privilege Escalation Vulnerability

References:

• HP Procurve Switches (HP)
  
• HPSBGN02589 SSRT100296 rev.1 - HP ProCurve Access Points, Access Controllers, an (HP)