A vulnerability has been reported in HP Enterprise Cluster Master Toolkit (ECMT), which can be exploited by malicious, local users to bypass certain security restrictions.

The vulnerability is caused due to an unspecified error, which can be exploited to gain unauthorised access e.g. to a database managed by Oracle 9i, 10gR1, 10gR2, 11gR1 or Sybase AES 15.0.2 or later.

The vulnerability is reported in ECMT B.05.00 running on HP-UX B.11.23 (11i v2) or HP-UX B.11.31 (11i v3).

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
HPSBUX02464 SSRT090210:
http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01894850

Deep Links
Links available to Secunia VIM customers