Vulnerability Note VU#895496

Hewlett-Packard MPE/ix contains vulnerabitily via architected interface facility

Overview

A vulnerability in certain Hewlett-Packard systems allows users to gain unauthorized access to user accounts and databases using the architected interface facility.

I. Description

HP3000 systems running MPE/iX release 5.5 and newer contain a vulnerability in the architected interface facility that allows users to gain unauthorized access to user accounts and databases. No further details are available. See HP document HPSBMP0103-011.

II. Impact

The complete impact of this vulnerability is not yet known.

III. Solution

Apply the patches described in the HP bulletin described above.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett Packard	Vulnerable	1-May-2001

References

Credit

This document was written by Shawn V. Hernan.

Other Information

Date Public:	2001-03-12
Date First Published:	2001-05-01
Date Last Updated:	2001-06-25
CERT Advisory:
CVE-ID(s):
NVD-ID(s):
US-CERT Technical Alerts:
Severity Metric:	0.00
Document Revision:	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.