HP has issued an update for Secure Web Server in OpenVMS. This fixes multiple vulnerabilities, which can be exploited by malicious, local users to disclose sensitive information, bypass certain security restrictions, and cause a DoS (Denial of Service), by malicious users to manipulate certain data, and by malicious people to disclose certain system and sensitive information, bypass certain security restrictions, manipulate certain data, and cause a DoS (Denial of Service).

For more information:
SA35326
SA37291
SA38316
SA39574
SA43198
SA44981
SA45232
SA45641
SA45748

The vulnerabilities are reported in HP Secure Web Server (SWS) version 3.1 and earlier, running CSWS_JAVA.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
HPSBOV02762 SSRT100825:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03281831

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers