Detections
Analytics

HP-UX PHNE_30983 : s700_800 11.23 ftpd(1M) patch

high Nessus Plugin ID 17422

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.23 ftpd(1M) patch :

The remote HP-UX host is affected by multiple vulnerabilities :

 - A potential vulnerability has been identified with HP-UX running wu-ftpd with the restricted gid option enabled where the vulnerability could be exploited by a local user to gain unauthorized access to files. (HPSBUX01059 SSRT4704)

 - A potential vulnerability has been identified with HP-UX running ftpd where the vulnerability could be exploited to allow a remote authorized user unauthorized access to files. (HPSBUX01119 SSRT4694)

Solution

Install patch PHNE_30983 or subsequent.

See Also

http://www.nessus.org/u?2fb36360

http://www.nessus.org/u?9d4b2076

Plugin Details

Severity: High

ID: 17422

File Name: hpux_PHNE_30983.nasl

Version: 1.21

Type: local

Published: 3/18/2005

Updated: 1/11/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Patch Publication Date: 6/25/2004

Reference Information

CVE: CVE-2004-0148, CVE-2005-0547

HP: HPSBUX01059, HPSBUX01119, SSRT4694, SSRT4704, emr_na-c00572225, emr_na-c01035678