HP-UX Vue 3.0 allows nearby consumer to get root privileges hp-vue (2284) Large Risk ,
Buy Windows 7
Description:
A vulnerability in Vue in HP-UX techniques could let a nearby attacker to achieve superuser privileges.
Consequences:
Gain Privileges
Remedy:
This problem was resolved by two sets of patches from two various Hewlett-Packard Protection Bulletins:
HPSBUX9404-008: Apply patch PHSS_4055 for HP9000 Series 300/400 or patch PHSS_4038 for HP9000 Series 700/800. See References. HPSBUX9504-027. Apply patch PHSS_4055 for HP9000 Sequence 300/400 or patch PHSS_4066 for HP9000 Sequence 700/800. See References.
References:
CIAC Details Bulletin E-23b: Vulnerability in HP-UX methods with HP Vue three.0. Hewlett-Packard Business Safety Bulletin HPSBUX9404-008: Protection Vulnerability in Vue 3.0. Hewlett-Packard Company Safety Bulletin HPSBUX9504-027: Safety Vulnerability in HP VUE3.0. (From SecurityFocus archive.) CVE-1999-1134: Vulnerability in Vue 3.0 in HP 9.x makes it possible for neighborhood customers to gain root privileges, as fixed by PHSS_4038,
Office Standard 2010 Key, PHSS_4055, and PHSS_4066. CVE-1999-1135: Vulnerability in VUE 3.0 in HP nine.x makes it possible for neighborhood consumers to gain root privileges, as fixed by PHSS_4994 and PHSS_5438.
Platforms Affected:
HP HP-UX nine.00 HP HP-UX nine.01 HP HP-UX 9.03 HP HP-UX 9.04 HP HP-UX nine.05 HP HP-UX 9.06 HP HP-UX 9.07 HP HP-UX nine.08 HP HP-UX nine.09 HP HP-UX 9.10
Reported:
Apr 20,
Buy Windows 7, 1994
The info inside of this database may well change without notice. Use of this details constitutes acceptance for use in an AS IS condition. There are no warranties,
Buy Windows 7 Starter, implied or or else,
Buy Windows 7 Professional, with regard to this info or its use. Any utilization of this data is with the user's risk. In no occasion shall the author/distributor (IBM Web Safety Systems X-Force) be held liable for almost any damages whatsoever arising out of or in connection using the use or spread of this info.
For corrections or additions please e mail xforce@iss.net
Return for the major page