OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[SA10580] HP-UX update for VirtualVault

From: Secunia Security Advisories (sec-advsecunia.com)
Date: Fri Jan 09 2004 - 16:49:39 CST


TITLE:
HP-UX update for VirtualVault

SECUNIA ADVISORY ID:
SA10580

VERIFY ADVISORY:
http://www.secunia.com/advisories/10580/

CRITICAL:
Less critical

IMPACT:
Privilege escalation, DoS

WHERE:
Local system

OPERATING SYSTEM:
HP-UX 11.x

SOFTWARE:
HP VirtualVault 4.x

DESCRIPTION:
HP has acknowledged some vulnerabilities in VirtualVault, which can
be exploited by malicious, local users to cause a DoS (Denial of
Service) or escalate their privileges.

For more information:
SA10096

The vulnerabilities affect HP9000 servers 700/800 running HP-UX
release 11.04 (VVOS) with Virtualvault A.04.50, A.04.60, or A.04.70
installed.

SOLUTION:
Apply the following patches available at:
http://itrc.hp.com

-- HP-UX 11.04 (VVOS) + Virtualvault 4.5 --

IWS update:
PHSS_30159

OWS update:
PHSS_30160

-- HP-UX 11.04 (VVOS) + Virtualvault 4.6 --

IWS update:
PHSS_30153

OWS update:
PHSS_30154

-- HP-UX 11.04 (VVOS) + Virtualvault 4.7 --

IWS update:
PHSS_30055

OWS update:
PHSS_30056

-- HP-UX 11.04 (VVOS) + Webproxy 2.0 --

PHSS_29894

-- HP-UX 11.04 (VVOS) + Webproxy 2.1 --

PHSS_30058

OTHER REFERENCES:
SA10096:
http://www.secunia.com/advisories/10096/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://www.secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://www.secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------