HP-UX PHSS_36870 : HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) (HPSBMA02274 SSRT071445 rev.3)

NASLDB: HP-UX PHSS_36870 : HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) (HPSBMA02274 SSRT071445 rev.3)

General

ID: 27064
Name: HP-UX PHSS_36870 : HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) (HPSBMA02274 SSRT071445 rev.3)

Summary: Checks for the patch in the swlist output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS Temporal Vector: –

Port: 0
Family: HP-UX Local Security Checks
Type: Local

Description

s700_800 11.23 HP System Management Homepage A.2.2.6.2 :

Potential security vulnerabilities have been identified with HP System
Management Homepage (SMH) for HP-UX. These vulnerabilities could by
exploited remotely to allow cross site scripting (XSS).

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: CVE-2007-5302
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: 2007/08/21
Plugin Release: 2007/10/16

Plugin

Version: 1.8
Filename: hpux_PHSS_36870.nasl
Filesize: 2947 bytes
MD5 Hash: 488922a167f59af33a27a912eb56f128

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/HP-UX/version", "Host/HP-UX/swlist
Dependencies: "ssh_get_info.nasl"