HP-UX PHSS_36622 : s700_800 11.X OV DP6.00 PA-RISC patch - CORE packet

critical Nessus Plugin ID 43136

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.X OV DP6.00 PA-RISC patch - CORE packet :

The remote HP-UX host is affected by multiple vulnerabilities :

- A potential security vulnerability has been identified with OpenView Data Protector Application Recovery Manager version 5.5 and 6.0. The vulnerability could be exploited remotely to create a denial of service (DoS).
(HPSBMA02481 SSRT090113)

- Potential security vulnerabilities have been identified with HP OpenView Storage Data Protector running on HP-UX, Windows, Linux and Solaris. These vulnerabilities could be exploited remotely to execute arbitrary code.
(HPSBMA02252 SSRT061258, SSRT061259)

Solution

Install patch PHSS_36622 or subsequent.

Plugin Details

Severity: Critical

ID: 43136

File Name: hpux_PHSS_36622.nasl

Version: 1.21

Type: local

Family: HP-UX Local Security Checks

Published: 12/14/2009

Updated: 1/11/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/8/2009

Exploitable With

CANVAS (White_Phosphorus)

Core Impact

Metasploit (HP OmniInet.exe MSG_PROTOCOL Buffer Overflow)

Reference Information

CVE: CVE-2007-2280, CVE-2007-2281, CVE-2009-3844

CWE: 119, 189

HP: SSRT061258, SSRT061259, SSRT090113, emr_na-c01124817, emr_na-c01943909

TRA: TRA-2009-04

Detections

Analytics