PT-2009-5075 · Hewlett Packard · Msl2024 Tape Library+3

Published 2009-09-24 · Updated 2017-08-17 · CVE-2009-2680

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions HP StorageWorks 1/8 G2 Tape Autoloader firmware versions 2.30 and earlier MSL2024 Tape Library firmware versions 4.20 and earlier MSL4048 Tape Library firmware versions 6.50 and earlier MSL8096 Tape Library firmware versions 8.90 and earlier

Description The issue affects the Remote Management Interface (RMI) for certain HP StorageWorks tape libraries and autoloaders, allowing remote attackers to cause a denial of service. The exact vectors of the attack are not specified.

Recommendations For HP StorageWorks 1/8 G2 Tape Autoloader firmware versions 2.30 and earlier, update to a version later than 2.30. For MSL2024 Tape Library firmware versions 4.20 and earlier, update to a version later than 4.20. For MSL4048 Tape Library firmware versions 6.50 and earlier, update to a version later than 6.50. For MSL8096 Tape Library firmware versions 8.90 and earlier, update to a version later than 8.90.

Fix

Related Identifiers

CVE-2009-2680

Affected Products

Hp Storageworks 1/8 G2 Tape Autoloader

Msl2024 Tape Library

Msl4048 Tape Library

Msl8096 Tape Library

References · 8

• http://secunia.com/advisories/36764 · Vendor Advisory
• http://vupen.com/english/advisories/2009/2662 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2680 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405 · Vendor Advisory
• http://osvdb.org/58131 · Note
• http://securitytracker.com/id?1022905 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53237 · Note
• http://securityfocus.com/bid/36388 · Note