|
OpenView Event Correlation Services Unspecified Privileged Access Vulnerability
|
|
Secunia Advisory:
|
SA17039
|
|
|
Release Date:
|
2005-10-05
|
|
Popularity:
|
4,845 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From local network
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | HP OpenView Event Correlation Services 3.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
Description:
A vulnerability has been reported in OpenView Event Correlation Services, which can be exploited by malicious people to gain access with escalated privileges.
The vulnerability is caused due to an unspecified error and affects versions 3.10, 3.20, 3.30, 3.31, 3.32, and 3.33 running on HP-UX B.11.00, B.11.11, and B.11.23, Solaris, Windows NT, Windows 2000, Windows XP, and Linux.
No more information is currently available.
Solution:
Apply patches.
http://support.openview.hp.com/patches/patch_index.jsp
NOTE: The "ecscmg.ovpl" file should be restored to the "cgi-bin" directory before applying the patches if it has been moved to another directory as a prior workaround.
OV ECS 3.32/3.33 for HP-UX B.11.00/B.11.11/B.11.23:
Install PHSS_33538 or later.
OV ECS 3.32/3.33 for HP-UX B.11.23 (IA):
Install PHSS_33539 or later.
OV ECS 3.30/3.31 for HP-UX B.11.00/B.11.11/B.11.23:
Install PHSS_33659 or later.
OV ECS 3.20 for HP-UX B.11.00/B.11.11:
Install PHSS_33797 or later.
OV ECS 3.10 for HP-UX B.11.00/B.11.11:
Install PHSS_33845 or later.
OV ECS 3.33 for SunOS 5.8/5.9/5.10:
Install PSOV_03411 or later.
OV ECS 3.31 for SunOS 5.8/5.9:
Install PSOV_03419 or later.
OV ECS 3.20 for SunOS 5.8/5.9:
Install PSOV_03427 or later.
OV ECS 3.10 for SunOS 5.8/5.9:
Install PSOV_03431 or later.
OV ECS 3.33 for Windows NT/2000/XP:
Install ECS_00039 or later.
OV ECS 3.31 for Windows NT/2000/XP:
Install ECS_00040 or later.
OV ECS 3.20 for Windows NT/2000:
Install ECS_00041 or later.
OV ECS 3.10 for Windows NT/2000:
Install ECS_00042 or later.
OV ECS 3.33 for Linux RedHatAS2.1:
Install ECSLX_00006 or later.
Provided and/or discovered by:
The vendor credits NGSSoftware.
Original Advisory:
http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA01225
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
6th Oct, 2008
|
New advisories:
|
19 |
|
New vulnerabilities:
|
52 |
|
Updated advisories:
|
26 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
 Solutions | More...
|
|
