HP Virtualvault Unauthorized Administrative Access Vulnerability

Bugtraq ID:	4690
Class:	Access Validation Error
CVE:	CVE-2002-0763
Remote:	Yes
Local:	No
Published:	May 08 2002 12:00AM
Updated:	Jul 11 2009 12:46PM
Credit:	Published in Hewlett-Packard security bulletin HPSBUX0205-103.
Vulnerable:	HP VirtualVault 4.5 - HP HP-UX 11.0 4
Not Vulnerable:

HP Virtualvault Unauthorized Administrative Access Vulnerability

HP Virtualvault is a secure implementation package distributed by Hewlett-Packard for use as a web and e-commerece platform.

A vulnerability has been reported in the administration server included with Virtualvault. Outside machines may be able to access this server by acting as a web server or trusted process.

It has been reported that only HP9000 series 700/800 machines running HP-UX 11.04 suffer from this vulnerability.

HP Virtualvault Unauthorized Administrative Access Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP Virtualvault Unauthorized Administrative Access Vulnerability

Solution:
A patch is available:


HP VirtualVault 4.5

• HP PHSS_24038
  http://itrc.hp.com

HP Virtualvault Unauthorized Administrative Access Vulnerability

References: