CVE-2010-0445

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2010-0445 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01954593

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2010-0445

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* HP Network Node Manager v8.10 running on HP-UX, Linux, Solaris, and Windows
* HP Network Node Manager v8.11 running on HP-UX, Linux, Solaris, and Windows
* HP Network Node Manager v8.12 running on HP-UX, Linux, Solaris, and Windows
* HP Network Node Manager v8.13 running on HP-UX, Linux, Solaris, and Windows

* HP-UX B.11.31
* HP-UX B.11.23 (IA)

A potential security vulnerability has been identified with HP Network Node Manager (NNM). The vulnerability could be exploited remotely to execute arbitrary commands.

Patch Availability:
HP has made patches available to resolve the vulnerability.
The patches are available from
http://support.openview.hp.com/selfsolve/patches

Network Node Manager v8.10, v8.11, v8.12, v8.13

Operating System / Required Patch

HP-UX (IA) / PHSS_40368 or subsequent

Linux RedHat4AS / NNM810L_00006 or subsequent

Solaris / NNM810S_00006 or subsequent

Windows / NNM810W_00006 or subsequent

CVE Information:
CVE-2010-0445

Disclosure Timeline:
Release Date: 2010-02-09
Last Updated: 2010-02-09

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus