HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability

Bugtraq ID:	6174
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Nov 13 2002 12:00AM
Updated:	Nov 13 2002 12:00AM
Credit:	This issue was announced in a Hewlett-Packard security bulletin.
Vulnerable:	HP TruCluster 1.6 Compaq Tru64 4.0 g Compaq Tru64 4.0 f
Not Vulnerable:

HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability

HP has reported an unspecified vulnerability in Tru64 Unix/TruCluster OSIS V5.4 LDAP Module for System Authentication.

This issue may allow local and remote attackers to gain unauthorized access to files and systems.

HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability

Solution:
Patches have been released which address this vulnerability.


Compaq Tru64 4.0 g

• HP osisv54_ssrt2385_40g_patch.tar
  http://ftp.support.compaq.com/patches/public/unix/v4.0g/osisv54_ssrt23 85_40g_patch.tar

Compaq Tru64 4.0 f

• HP osisv54_ssrt2385_40f_patch.tar
  http://ftp.support.compaq.com/patches/public/unix/v4.0f/osisv54_ssrt23 85_40f_patch.tar

HP Tru64/TruCluster OSIS V5.4 LDAP Module Unauthorized File Access Vulnerability

References: