PT-2008-3214 · Sun Microsystems+1 · Nfs+2

Published 2008-07-30 · Updated 2017-09-29 · CVE-2008-1662

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP System Administration Manager (SAM) on HP-UX versions B.11.11 and B.11.23

Description The issue is related to an unspecified vulnerability in the HP System Administration Manager when used to configure NFS. This might allow remote attackers to read or modify arbitrary files due to an "empty systems list."

Recommendations For HP-UX B.11.11, update the configuration to properly handle the systems list. For HP-UX B.11.23, update the configuration to properly handle the systems list. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2008-1662

HPSBUX02286

Affected Products

System Administration Manager

Hp-Ux

Nfs

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2008-1662 · Security Note
• http://secunia.com/advisories/31309 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01367453 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1662 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5814 · Note
• http://securityfocus.com/bid/30449 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44119 · Note
• http://securitytracker.com/id?1020580 · Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMTM2NzQ1Mw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note
• http://vupen.com/english/advisories/2008/2258 · Note