Vulnerability Bulletins |
Múltiples vulnerabilidades en OpenView Event Correlation Services |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Compromiso Root |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
OpenView Event Correlation Services (OV ECS) 3.32 / HP-UX OpenView Event Correlation Services (OV ECS) 3.32 / Solaris OpenView Event Correlation Services (OV ECS) 3.32 / Windows NT OpenView Event Correlation Services (OV ECS) 3.32 / Windows 2000 OpenView Event Correlation Services (OV ECS) 3.32 / Windows XP OpenView Event Correlation Services (OV ECS) 3.32 / Linux OpenView Event Correlation Services (OV ECS) 3.33 / HP-UX OpenView Event Correlation Services (OV ECS) 3.33 / Solaris OpenView Event Correlation Services (OV ECS) 3.33 / Windows NT OpenView Event Correlation Services (OV ECS) 3.33 / Windows 2000 OpenView Event Correlation Services (OV ECS) 3.33 / Windows XP OpenView Event Correlation Services (OV ECS) 3.33 / Linux |
Description |
|
|
Se han descubierto múltiples vulnerabilidades en las versiones 3.32 y 3.33 de HP OpenView Event Correlation Services (OV ECS). La explotación de estas vulnerabilidades podría permitir a un atacante remoto causar una denegación de servicio o llegar a ejecutar código arbitrario con privilegios administrativos. |
|
Solution |
|
|
Actualización de software OV ECS 3.33/3.32 HP-UX B.11.00, B.11.11 - PHSS_32918 HP-UX B.11.23 - PHSS_32919 Solaris - PSOV_03389 Windows NT, Windows 2000, Windows XP - ECS_00033 Linux RedHatAS2.1 - ECSLX_00003 http://www.itrc.hp.com/ |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2005-1433 |
| BID | |
Other resources |
|
|
HP SECURITY BULLETIN HPSBMA01141 http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01141 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-05-02 |
| 1.1 | CAN añadido | 2005-05-09 |