Vulnerability Note VU#895496

Hewlett-Packard MPE/ix contains vulnerabitily via architected interface facility

Overview

A vulnerability in certain Hewlett-Packard systems allows users to gain unauthorized access to user accounts and databases using the architected interface facility.

I. Description

HP3000 systems running MPE/iX release 5.5 and newer contain a vulnerability in the architected interface facility that allows users to gain unauthorized access to user accounts and databases. No further details are available. See HP document HPSBMP0103-011.

II. Impact

The complete impact of this vulnerability is not yet known.

III. Solution

Apply the patches described in the HP bulletin described above.

Systems Affected

Vendor	Status	Date Updated
Hewlett Packard	Vulnerable	1-May-2001

References

Credit

This document was written by Shawn V. Hernan.

Other Information

Date Public	03/12/2001
Date First Published	05/01/2001 12:57:55 AM
Date Last Updated	06/25/2001
CERT Advisory
CVE Name
Metric	0.00
Document Revision	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.