PT-2009-5076 · Hewlett Packard+1 · Hp Procurve Identity Driven Manager+4

Published 2009-09-29 · Updated 2019-10-09 · CVE-2009-2681

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP ProCurve Identity Driven Manager versions A.02.x through A.02.03 HP ProCurve Identity Driven Manager versions A.03.x through A.03.00

Description The issue allows local users to gain privileges via unknown vectors on Windows Server 2003 with IAS and Windows Server 2008 with NPS.

Recommendations For HP ProCurve Identity Driven Manager versions A.02.x through A.02.03, update to a version outside of this range to resolve the issue. For HP ProCurve Identity Driven Manager versions A.03.x through A.03.00, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2009-2681

Affected Products

Hp Procurve Identity Driven Manager

Ias

Nps

Windows Server 2003

Windows Server 2008

References · 6

• http://secunia.com/advisories/36792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2681 · Security Note
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159 · Vendor Advisory
• http://vupen.com/english/advisories/2009/2707 · Vendor Advisory
• http://securityfocus.com/bid/36462 · Note
• http://securitytracker.com/id?1022915 · Note