Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
SecuriTeam™  Beyond Security®  SecuriTeam™ Home  Ask the Team  Mailing Lists  Advertising Info  Blogs SecuriTeam™ in Your Inbox   E-mail this CVE-2010-3286 to a friend New vulnerability? New tool? Tell us	CVE-2010-3286 HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows Arbitrary File Download Vulnerability     Credit: The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02548231 Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    CVE-2010-3286 Details Check for CVE-2010-3286 Vulnerability Assessment and Management. Automated Pen Testing for 50 to 50,000 nodes beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * HP Systems Insight Manager (SIM) for HP-UX prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for Linux v6.0 prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for HP-UX prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for Linux v6.1 prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for Windows v6.0 prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for Windows v6.0 prior to v6.0 Update 2  * HP Systems Insight Manager (SIM) for Windows v6.1 prior to September 2010 Hotfix  * HP Systems Insight Manager (SIM) for Windows v6.1 prior to v6.1 Update 2 The vulnerability could be exploited remotely to download arbitrary files. Patch Availability: HP has provided the following hotfixes to resolve the vulnerability for HP-UX, Linux, and Windows HP-UX, HP SIM v6.0 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_hpux60.html#hotfix HP-UX, HP SIM v6.1 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_hpux.html#hotfix Linux, HP SIM v6.0 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_linux60.html#Update Linux, HP SIM v6.1 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_linux61.html#hotfix Windows, HP SIM v6.0 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_windows60.html#hotfix Windows, HP SIM v6.1 September 2010 Hotfix http://h18013.www1.hp.com/products/servers/management/hpsim/dl_windows61.html#hotfix For Windows there are updates available on DVD images; available for download here: http://h18013.www1.hp.com/products/servers/management/fpdownload.html CVE Information: CVE-2010-3286 Disclosure Timeline: 2010-10-13 Initial release 2010-10-13 Last Updated  Comments on CVE-2010-3286:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®