PT-2007-2356 · Hewlett Packard · Hp-Ux

Published 2007-02-14 · Updated 2017-07-29 · CVE-2007-0915

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: HP-UX B.11.11

Description: The issue allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request. This is related to the Distributed SLS daemon (SLSd) on HP-UX.

Recommendations: For HP-UX B.11.11, consider restricting access to the SLSd daemon to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2007-0915

Affected Products

Hp-Ux

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-0915 · Security Note
• http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00862809 · Vendor Advisory
• http://secunia.com/advisories/24169 · Note
• http://securityfocus.com/bid/22551 · Note
• http://vupen.com/english/advisories/2007/0590 · Note
• http://osvdb.org/33186 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=474 · Note
• http://securitytracker.com/id?1017630 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32471 · Note