PT-2010-2215 · Hewlett Packard · Hp-Ux

Published 2010-03-25 · Updated 2017-09-19 · CVE-2010-0451

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.31 08 and earlier

Description The installation process for NFS/ONCplus on HP-UX changes the NFS SERVER setting in the nfsconf file. This might allow remote attackers to obtain filesystem access via NFS requests.

Recommendations For HP-UX versions B.11.31 08 and earlier, consider restricting access to the NFS service until a proper configuration can be applied to prevent unauthorized filesystem access.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0451

HPSBUX02509

Affected Products

Hp-Ux

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0451 · Security Note
• http://secunia.com/advisories/39111 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=126962272413767&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0451 · Security Note
• http://vupen.com/english/advisories/2010/0731 · Note
• http://securitytracker.com/id?1023758 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12025 · Note
• http://osvdb.org/63243 · Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMjAyNjY0Mg%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57216 · Note
• http://securityfocus.com/bid/38982 · Note