Description

HP has acknowledged some vulnerabilities in Network Node Manager i, which can be exploited by malicious users to disclose potentially sensitive information, bypass certain security restrictions, cause a DoS (Denial of Service), gain escalated privileges, and compromise a vulnerable system and by malicious people to conduct spoofing attacks and bypass certain security restrictions.

The vulnerabilities are caused due to a bundled vulnerable version of PostgreSQL.

For more information:
SA34206
SA36660
SA37663
SA39845
SA41692
SA43144

The vulnerabilities are reported in versions 9.0x and 9.1 running on HP-UX, Linux, Solaris, and Windows.

Solution
Apply fixes.
Further details available to Secunia VIM customers

Changelog
Further details available to Secunia VIM customers

Original Advisory
HPSBMU02781 SSRT100617:
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03333585

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers