HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Hpux | — | Update Ignite-UX.FILE-SRV-11-00 to the latest versionUpdate Ignite-UX.FILE-SRV-11-11 to the latest versionUpdate Ignite-UX.BOOT-COMMON-IA to the latest versionUpdate Ignite-UX.IGNITE to the latest versionUpdate Ignite-UX.BOOT-KRN-11-11 to the latest versionUpdate Ignite-UX.BOOT-KRN-11-00 to the latest versionUpdate Ignite-UX.FILESRV-1122IA to the latest versionUpdate Ignite-UX.OBAM-RUN to the latest versionUpdate Ignite-UX.BOOT-KRN-11-22 to the latest versionUpdate Ignite-UX.RECOVERY to the latest versionUpdate Ignite-UX.BOOT-COMMON-PA to the latest versionUpdate Ignite-UX.BOOT-SERVICES to the latest versionUpdate Ignite-UX.BOOT-KRN-11-23 to the latest versionUpdate Ignite-UX.FILE-SRV-11-23 to the latest versionUpdate Ignite-UX.CFG-FILE-11-22 to the latest versionUpdate Ignite-UX.MGMT-TOOLS to the latest version | Aug 11, 2017 | Dec 31, 2004 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub