CVE-2007-4590: Low severity HP HP-UX vulnerability

Published Aug 29, 2007

Updated

The getsysteminfo command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11.23, and B.11.31 does not inform local users of networking changes made by the command, which has unknown impact and attack vectors.

Affected Software

13 affected components

HP HP-UX=11.23

HP HP-UX=11.31

HP DynRootDisk=a.1.0.16.417

HP DynRootDisk=a.1.0.18.245

HP DynRootDisk=a.1.1.0.344

HP DynRootDisk=a.2.0.0.592

HP HP-UX=11.11

HP HP-UX=11.23

HP HP-UX=11.31

HP Ignite-UX=c.7.0.212

HP Ignite-UX=c.7.1.92

HP Ignite-UX=c.7.2.93

HP Ignite-UX=c.7.3.144

Remediation

Patch Available

http://secunia.com/advisories/26599

Event History

Aug 29, 2007

CVE Published

01:17 AM

Data Sourced

01:17 AM

DescriptionWeaknessAffected Software

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4590?

The severity of CVE-2007-4590 is currently classified as unknown due to the lack of known impact and attack vectors.

How do I fix CVE-2007-4590?

To fix CVE-2007-4590, users should consider updating to a secure version of Ignite-UX and DynRootDisk that mitigates this vulnerability.

Which versions of HP-UX are affected by CVE-2007-4590?

CVE-2007-4590 affects HP-UX versions B.11.11, B.11.23, and B.11.31.

What products are vulnerable to CVE-2007-4590?

CVE-2007-4590 impacts Ignite-UX versions C.7.0 through C.7.3 and DynRootDisk versions A.1.0.16.417 through A.2.0.0.592.

What is the main issue with CVE-2007-4590?

The main issue with CVE-2007-4590 is that the get_system_info command does not inform local users of networking changes, leading to potential unnoticed changes.