PT-2009-5075 · Hewlett Packard · Msl2024 Tape Library+3

Publicado 2009-09-24 · Atualizado 2017-08-17 · CVE-2009-2680

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions HP StorageWorks 1/8 G2 Tape Autoloader firmware versions 2.30 and earlier MSL2024 Tape Library firmware versions 4.20 and earlier MSL4048 Tape Library firmware versions 6.50 and earlier MSL8096 Tape Library firmware versions 8.90 and earlier

Description The issue affects the Remote Management Interface (RMI) for certain HP StorageWorks tape libraries and autoloaders, allowing remote attackers to cause a denial of service. The exact vectors of the attack are not specified.

Recommendations For HP StorageWorks 1/8 G2 Tape Autoloader firmware versions 2.30 and earlier, update to a version later than 2.30. For MSL2024 Tape Library firmware versions 4.20 and earlier, update to a version later than 4.20. For MSL4048 Tape Library firmware versions 6.50 and earlier, update to a version later than 6.50. For MSL8096 Tape Library firmware versions 8.90 and earlier, update to a version later than 8.90.

Correção

Identificadores relacionados

CVE-2009-2680

Produtos afetados

Hp Storageworks 1/8 G2 Tape Autoloader

Msl2024 Tape Library

Msl4048 Tape Library

Msl8096 Tape Library

Referências · 8

• http://secunia.com/advisories/36764 · Aviso do Fabricante
• http://osvdb.org/58131 · Nota
• http://vupen.com/english/advisories/2009/2662 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-2680 · Nota de Segurança
• http://securitytracker.com/id?1022905 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53237 · Nota
• http://securityfocus.com/bid/36388 · Nota