PT-2014-8328 · Hewlett Packard · Hp-Ux

Publicado 2014-12-10 · Atualizado 2019-10-09 · CVE-2014-7879

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.11 through B.11.31

Description The issue allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors when the PAM configuration includes libpam updbe.

Recommendations For HP-UX versions B.11.11 through B.11.31, consider removing or disabling the libpam updbe configuration from PAM to prevent exploitation until a patch is available.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2014-7879

HPSBUX03166

Produtos afetados

Hp-Ux

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-7879 · Nota de Segurança
• http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253Demr_na-c04511778%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7879 · Nota de Segurança
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778 · Aviso do Fabricante