HP Network Node Manager i (NNMi) Lets Local Users Read and Write Data

SecurityTracker Alert ID: 1025520

SecurityTracker URL: http://securitytracker.com/id/1025520

CVE Reference: CVE-2011-1855 (Links to External Site)

Date: May 11 2011

Impact: Disclosure of system information, Disclosure of user information, Modification of system information, Modification of user information

Fix Available: Yes Vendor Confirmed: Yes

Version(s): NNM 9.x

Description: A vulnerability was reported in HP Network Node Manager i (NNMi). A local user can read and write data on the target system.

A local user can read and write data and log files.

Impact: A local user can read and write data and log files on the target system.

Solution: The vendor has issued a fix.

HP-UX: PHSS_41982 or subsequent
Linux: NNM900L_00004 or subsequent
Solaris: NNM900S_00004 or subsequent
Windows: NNM900W_00004 or subsequent

The vendor's advisory is available at:

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02821425

Vendor URL: h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02821425 (Links to External Site)

Cause: Access control error

Underlying OS: Linux (Red Hat Enterprise), UNIX (HP/UX), UNIX (Solaris - SunOS), Windows (2000), Windows (2003), Windows (XP)

Message History: None.


[Original Message Not Available for Viewing]

Home | View Topics | Search | Contact Us
This web site uses cookies for web analytics. Learn More
Copyright 2020, SecurityGlobal.net LLC