PT-2014-8328 · Hewlett Packard · Hp-Ux

Published 2014-12-10 · Updated 2019-10-09 · CVE-2014-7879

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.11 through B.11.31

Description The issue allows remote authenticated users to bypass authentication and execute arbitrary code via unspecified vectors when the PAM configuration includes libpam updbe.

Recommendations For HP-UX versions B.11.11 through B.11.31, consider removing or disabling the libpam updbe configuration from PAM to prevent exploitation until a patch is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-7879

HPSBUX03166

Affected Products

Hp-Ux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-7879 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7879 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778 · Vendor Advisory
• http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253Demr_na-c04511778%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note