HP-UX PHCO_36809 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)

NASLDB: HP-UX PHCO_36809 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)

General

ID: 26123
Name: HP-UX PHCO_36809 : HP-UX Running logins(1M), Remote Unauthorized Access (HPSBUX02259 SSRT071439 rev.1)

Summary: Checks for the patch in the swlist output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: HP-UX Local Security Checks
Type: Local

Description

s700_800 11.11 logins(1M) cumulative patch :

A potential security vulnerability has been identified in HP-UX
running the logins(1M) command. This command incorrectly reports
password status. As a result password issues may not be detected,
allowing remote unauthorized access.

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2007/09/18
Plugin Release: 2007/09/25

Plugin

Version: 1.8
Filename: hpux_PHCO_36809.nasl
Filesize: 2834 bytes
MD5 Hash: 906944b0aeed982cc752660548917795

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/HP-UX/version", "Host/HP-UX/swlist
Dependencies: "ssh_get_info.nasl"