Vulnerability Note VU#551683

Hewlett-Packard Company MPE/iX FTPSRVR does not properly validate certain commands

Overview

A vulnerability in the FTP server included with the MPE/iX operating system may allow a remote attacker to gain unauthorized access.

I. Description

MPE/iX is an operating system produced by Hewlett-Packard Company. The FTP server included with MPE/iX (FTPSRVR) contains a vulnerability which may allow a remote attacker to gain unauthorized access to the system.

II. Impact

A remote attacker may be able to gain unauthorized access to a vulnerable system.

III. Solution

Apply a patch as described in Hewlett Packard Security Bulletin HPSBMP0204-014.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett-Packard Company	Vulnerable	1-May-2002

References

http://www.hp.com/products1/evolution/e3000/download/mpeix75.pdf
http://www.securityfocus.com/bid/4652

Credit

Thanks to Hewlett-Packard Company for reporting this vulnerability.

This document was written by Ian A. Finlay.

Other Information

Date Public:	2002-05-01
Date First Published:	2003-08-19
Date Last Updated:	2003-08-19
CERT Advisory:
CVE-ID(s):	CAN-2002-0610
NVD-ID(s):	CAN-2002-0610
US-CERT Technical Alerts:
Metric:	28.35
Document Revision:	6

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader