int(3075)

Vulnerability Bulletins


Obtención de acceso en OpenView Network Node Manager

Vulnerability classification

Property Value
Confidence level Oficial
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio exotico

System information

Property Value
Affected manufacturer Comercial Software
Affected software OpenView Network Node Manager 6.20
OpenView Network Node Manager 6.4x
OpenView Network Node Manager 7.01
OpenView Network Node Manager 7.50
OpenView Network Node Manager 7.51

Description

Se ha descubierto una vulnerabilidad en OpenView Network Node Manager (OV NNM). La vulnerabilidad reside en un error no especificado.

Un atacante remoto podría ganar acceso no autorizado a ciertas zonas del servidor NNM.

Solution



Actualización de software

Hewlett-Packard

OpenView Network Node Manager 6.20
HP-UX B.11.11 / PHSS_35113
HP-UX B.11.00 / PHSS_35113
Solaris / PSOV_03461
Windows / NNM_01139
http://support.openview.hp.com/patches/

OpenView Network Node Manager 6.4x
HP-UX B.11.11 / PHSS_34949
HP-UX B.11.00 / PHSS_34949
Solaris / PSOV_03460
Windows / NNM_01138
http://support.openview.hp.com/patches/

OpenView Network Node Manager 7.01
HP-UX B.11.11 / PHSS_35579
HP-UX B.11.00 / PHSS_35579
Solaris / PSOV_03468
Windows / NNM_01147
http://support.openview.hp.com/patches/

OpenView Network Node Manager 7.50
HP-UX B.11.23 (IA) / PHSS_35844
HP-UX B.11.23 (PA) / PHSS_35843
HP-UX B.11.11 / PHSS_35843
HP-UX B.11.00 / PHSS_35843
Linux RedHatAS2.1 / LXOV_00050
Solaris / PSOV_03470
Windows / NNM_01149
http://support.openview.hp.com/patches/

OpenView Network Node Manager 7.51
HP-UX B.11.23 (IA) / PHSS_35844
HP-UX B.11.23 (PA) / PHSS_35843
HP-UX B.11.11 / PHSS_35843
HP-UX B.11.00 / PHSS_35843
Linux RedHatAS2.1 / LXOV_00050
Solaris / PSOV_03470
Windows / NNM_01149
http://support.openview.hp.com/patches/

Standar resources

Property Value
CVE
BID

Other resources

HP SECURITY BULLETIN (HPSBMA02198)
http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=c00854999

Version history

Version Comments Date
1.0 Aviso emitido 2007-03-27
Ministerio de Defensa
CNI
CCN
CCN-CERT