Vulnerability Bulletins |
Vulnerabilidad en HP OpenView Radia Management Applications |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio exotico |
System information |
|
| Property | Value |
| Affected manufacturer | UNIX |
| Affected software |
HP OpenView Radia Management Applications 2.x - Radia Notify Daemon HP OpenView Radia Management Applications 3.x - Radia Notify Daemon HP OpenView Radia Management Applications 4.x - Radia Notify Daemon |
Description |
|
|
Se ha descubierto múltiples vulnerabilidades de desbordamiento de búfer en las versiones 2.x, 3.x y 4.x de HP OpenView Radia Management Applications. Las vulnerabilidades residen en el componente Radia Notify Daemon. La explotación de estas vulnerabilidades podría permitir a un atacante remoto ejecutar código arbitrario con los privilegios del componente RADEXECD. |
|
Solution |
|
|
Actualización de software HP HP OpenView Radia Notify Daemon 2.x AIX - Instalar RADAPPSAIX_00001 HP-UX B.10.20 - Instalar RADAPPSHPUX1_00001 HP-UX B.10.30 - Instalar RADAPPSHPUX1_00001 HP-UX B.11.00 - Instalar RADAPPSHPUX1_00001 HP-UX B.11.04 - Instalar RADAPPSHPUX1_00001 HP-UX B.11.11 - Instalar RADAPPSHPUX1_00001 HP-UX B.11.22 - Instalar RADAPPSHPUX1_00001 HP-UX B.11.23 - Instalar RADAPPSHPUX1_00001 Linux - Instalar RADAPPSLNX_00001 SunOS - Instalar RADAPPSSOL_00001 Windows NT, 2000, 2003, XP - Instalar RADAPPSWIN32_00005 Windows 9x - Instalar RADAPPSWIN32_00008 http://support.openview.hp.com/ HP OpenView Radia Notify Daemon 3.x AIX - Instalar RADAPPSAIX_00002 HP-UX B.10.20 - Instalar RADAPPSHPUX1_00002 HP-UX B.10.30 - Instalar RADAPPSHPUX1_00002 HP-UX B.11.00 - Instalar RADAPPSHPUX1_00002 HP-UX B.11.04 - Instalar RADAPPSHPUX1_00002 HP-UX B.11.11 - Instalar RADAPPSHPUX1_00002 HP-UX B.11.22 - Instalar RADAPPSHPUX1_00002 HP-UX B.11.23 - Instalar RADAPPSHPUX1_00002 Linux - Instalar RADAPPSLNX_00002 SunOS - Instalar RADAPPSSOL_00002 Windows NT, 2000, 2003, XP - Instalar RADAPPSWIN32_00006 Windows 9x - Instalar RADAPPSWIN32_00009 http://support.openview.hp.com/ HP OpenView Radia Notify Daemon 4.x Windows NT, 2000, 2003, XP - Instalar RADAPPSWIN32_00007 Windows 9x - Instalar RADAPPSWIN32_00010 http://support.openview.hp.com/ |
|
Standar resources |
|
| Property | Value |
| CVE |
CAN-2005-1825 CAN-2005-1826 |
| BID | |
Other resources |
|
|
John Cartwright Security Advisory http://www.grok.org.uk/advisories/radexecd.html HP SECURITY BULLETIN HPSBMA01143 http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01143 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2005-06-02 |
| 2.0 | Aviso emitido por John Cartwright | 2005-06-03 |
| 2.1 | CAN añadido | 2005-08-25 |