HP Network Node Manager i Unspecified Local Security Bypass Vulnerability

Bugtraq ID:	47420
Class:	Unknown
CVE:	CVE-2011-1534
Remote:	No
Local:	Yes
Published:	Apr 19 2011 12:00AM
Updated:	Nov 15 2011 12:52AM
Credit:	Reported by the vendor
Vulnerable:	HP Network Node Manager i 9.10 HP Network Node Manager i 9.03 HP Network Node Manager i 9.02 HP Network Node Manager i 9.01 HP Network Node Manager i 9.00 HP HP-UX B.11.31 HP HP-UX B.11.23
Not Vulnerable:

HP Network Node Manager i Unspecified Local Security Bypass Vulnerability

HP Network Node Manager i is prone to a local security-bypass vulnerability.

A local attacker could exploit this issue to gain unauthorized access to the NNMi processes. This may aid in further attacks.

HP Network Node Manager i 9.00 is vulnerable; other versions may also be affected.

HP Network Node Manager i Unspecified Local Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP Network Node Manager i Unspecified Local Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

HP Network Node Manager i Unspecified Local Security Bypass Vulnerability

References:

• HP Network Node Manager i Homepage (HP)
  
• HPSBMA02659 SSRT100440 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux (HP)
  
• HP Security Advisory - HPSBMA02659 SSRT100440 (HP)