CVE-2010-4252

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2010-4252 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02737002

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2010-4252

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* HP-UX B.11.11 running OpenSSL before vA.00.09.08q
* HP-UX B.11.23 running OpenSSL before vA.00.09.08q
* HP-UX B.11.31 running OpenSSL before vA.00.09.08q

Immune Systems:
* HP-UX B.11.11 running OpenSSL vA.00.09.08q or subsequent
* HP-UX B.11.23 running OpenSSL vA.00.09.08q or subsequent
* HP-UX B.11.31 running OpenSSL vA.00.09.08q or subsequent

This vulnerability could be exploited remotely to execute arbitrary code or create a Denial of Service (DoS) or an authentication bypass.

Patch Availability:
HP has provided upgrades to resolve this vulnerability. The upgrades are available from the following location:
http://software.hp.com

CVE Information:
CVE-2010-3864
CVE-2010-4180
CVE-2010-4252

Disclosure Timeline:
Release Date: 2011-03-02
Last Updated: 2011-03-01

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus