Secunia

HP has acknowledged some vulnerabilities in HP Oracle for Openview (OfO). Some vulnerabilities have unknown impacts while others can be exploited by malicious, local users to gain escalated privileges, by malicious users to cause a DoS (Denial of Service), disclose sensitive information, gain escalated privileges, or compromise a vulnerable system, and by malicious people to bypass certain security restrictions or to cause a DoS.

For more information:
SA31087

The vulnerabilities are reported in versions v8.1.7, v9.1.01, v9.2, v9.2.0, v10g, and v10gR2 running on HP-UX, Tru64 UNIX, Linux, Solaris, and Windows.

Solution
Install the Oracle Critical Patch Update - July 2008.
Original Advisory
HPSBMA02133 SSRT061201 rev.9:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area