HP-UX Vue three.0 permits local user to obtain root privileges hp-vue (2284) Substantial Danger ,
Windows 7 Professional Sale
Description:
A vulnerability in Vue in HP-UX programs could enable a neighborhood attacker to achieve superuser privileges.
Consequences:
Gain Privileges
Remedy:
This situation was resolved by two sets of patches from two different Hewlett-Packard Protection Bulletins:
HPSBUX9404-008: Apply patch PHSS_4055 for HP9000 Sequence 300/400 or patch PHSS_4038 for HP9000 Sequence 700/800. See References. HPSBUX9504-027. Use patch PHSS_4055 for HP9000 Sequence 300/400 or patch PHSS_4066 for HP9000 Sequence 700/800. See References.
References:
CIAC Info Bulletin E-23b: Vulnerability in HP-UX methods with HP Vue three.0. Hewlett-Packard Firm Protection Bulletin HPSBUX9404-008: Security Vulnerability in Vue 3.0. Hewlett-Packard Organization Protection Bulletin HPSBUX9504-027: Security Vulnerability in HP VUE3.0. (From SecurityFocus archive.) CVE-1999-1134: Vulnerability in Vue 3.0 in HP 9.x makes it possible for neighborhood consumers to realize root privileges, as fixed by PHSS_4038,
Genuine Windows 7 Home Basic, PHSS_4055,
Office 2010 Product Key, and PHSS_4066. CVE-1999-1135: Vulnerability in VUE 3.0 in HP nine.x allows regional customers to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
Platforms Impacted:
HP HP-UX nine.00 HP HP-UX 9.01 HP HP-UX nine.03 HP HP-UX 9.04 HP HP-UX 9.05 HP HP-UX nine.06 HP HP-UX 9.07 HP HP-UX 9.08 HP HP-UX nine.09 HP HP-UX nine.ten
Reported:
Apr twenty, 1994
The information inside of this database may possibly adjust without having discover. Utilization of this information constitutes acceptance for use in an AS IS condition. There are no warranties,
Cheap Office 2007 Key, implied or in any other case,
Office Professional Plus 2007 Product Key, regarding this info or its use. Any use of this information is at the user's danger. In no event shall the author/distributor (IBM World wide web Protection Methods X-Force) be held liable for any damages whatsoever arising out of or in connection together with the use or distribute of this data.
For corrections or additions make sure you electronic mail xforce@iss.net
Return towards the main page