Detections
Analytics
HP-UX PHSS_35437 : s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update
high Nessus Plugin ID 23715
Synopsis
The remote HP-UX host is missing a security-related patch.Description
s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update :The remote HP-UX host is affected by multiple vulnerabilities :
- A security vulnerability has been identified in OpenSSL used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy that may allow remote unauthorized access. (HPSBUX02165 SSRT061266)
- Potential security vulnerabilities have been identified with Apache running on HP-UX VirtualVault. These vulnerabilities could be exploited remotely to allow execution of arbitrary code, Denial of Service (DoS), or unauthorized access. (HPSBUX02172 SSRT061269)
Solution
Install patch PHSS_35437 or subsequent.See Also
Plugin Details
Severity: High
ID: 23715
File Name: hpux_PHSS_35437.nasl
Version: 1.19
Type: local
Family: HP-UX Local Security Checks
Published: 11/22/2006
Updated: 1/11/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:hp:hp-ux
Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/31/2006
Vulnerability Publication Date: 12/5/2005
Exploitable With
Core Impact
Metasploit (Apache Module mod_rewrite LDAP Protocol Buffer Overflow)
Reference Information
CVE: CVE-2005-3352, CVE-2005-3357, CVE-2005-3747, CVE-2006-3747, CVE-2006-4339