ignite-ux vulnerabilities and exploits

(subscribe to this query)

3.3

CVSSv2

The get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.

Hp Dynrootdisk A.1.0.16.417 Hp Dynrootdisk A.2.0.0.592 Hp Dynrootdisk A.1.0.18.245 Hp Dynrootdisk A.1.1.0.344 Hp Hp-ux 11.23 Hp Hp-ux 11.31 Hp Hp-ux 11.11 Hp Ignite-ux C.7.1.92 Hp Ignite-ux C.7.2.93 Hp Ignite-ux C.7.3.144 Hp Ignite-ux C.7.0.212

7.5

CVSSv2

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote malicious users to obtain sensitive information.

Hp Ignite-ux C.6.2.241

10

CVSSv2

Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote malicious users to "gain root access" via unspecified vectors.

Hp Hp-ux 11.11 Hp Hp-ux 11.23 Hp Hp-ux 11.00

7.5

CVSSv2

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to a blank and allow an malicious user to gain privileges.

Hp Hp-ux 11.00

6.4

CVSSv2

HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote malicious users to modify data or cause disk consumption.

Hp Hp-ux 11.11 Hp Hp-ux 11.22 Hp Hp-ux 11.00 Hp Hp-ux 11.23

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook