Office Enterprise 2007 ISS X-Force Database hp-vu

[proxy545]

HP-UX Vue 3.0 allows nearby user to obtain root privileges hp-vue (2284) Large Risk ,Office 2010 Professional Plus

Description:

A vulnerability in Vue in HP-UX programs could permit a nearby attacker to achieve superuser privileges.


Consequences:

Gain Privileges

Remedy:

This problem was resolved by two sets of patches from two various Hewlett-Packard Protection Bulletins:
HPSBUX9404-008: Use patch PHSS_4055 for HP9000 Sequence 300/400 or patch PHSS_4038 for HP9000 Sequence 700/800. See References. HPSBUX9504-027. Utilize patch PHSS_4055 for HP9000 Sequence 300/400 or patch PHSS_4066 for HP9000 Series 700/800. See References.
References:
CIAC Data Bulletin E-23b: Vulnerability in HP-UX systems with HP Vue three.0. Hewlett-Packard Company Security Bulletin HPSBUX9404-008: Safety Vulnerability in Vue 3.0. Hewlett-Packard Business Safety Bulletin HPSBUX9504-027: Security Vulnerability in HP VUE3.0. (From SecurityFocus archive.) CVE-1999-1134: Vulnerability in Vue 3.0 in HP 9.x makes it possible for nearby end users to achieve root privileges,Office Enterprise 2007, as fixed by PHSS_4038, PHSS_4055, and PHSS_4066. CVE-1999-1135: Vulnerability in VUE three.0 in HP 9.x allows regional end users to achieve root privileges,Office 2007 Download, as fixed by PHSS_4994 and PHSS_5438.
Platforms Affected:
HP HP-UX 9.00 HP HP-UX 9.01 HP HP-UX 9.03 HP HP-UX 9.04 HP HP-UX 9.05 HP HP-UX nine.06 HP HP-UX 9.07 HP HP-UX 9.08 HP HP-UX nine.09 HP HP-UX nine.ten
Reported:

Apr twenty,Windows 7 Ultimate Key, 1994

The data within this database may possibly change with out notice. Utilization of this info constitutes acceptance for use in an AS IS condition. There aren't any warranties, implied or in any other case,Office 2007, regarding this information or its use. Any use of this info is at the user's danger. In no function shall the author/distributor (IBM Net Security Programs X-Force) be held liable for almost any damages whatsoever arising out of or in connection together with the use or distribute of this details.

For corrections or additions make sure you e mail xforce@iss.net

Return for the principal page