First published: Wed Dec 10 2014(Updated: )
HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpam_updbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HPE HP-UX | =b.11.11 | |
HPE HP-UX | =b.11.23 | |
HPE HP-UX | =b.11.31 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-7879 is considered to have a high severity due to the ability for remote authenticated users to bypass authentication and execute arbitrary code.
To fix CVE-2014-7879, it is recommended to update the PAM configuration to eliminate the use of libpam_updbe or apply relevant patches from HP.
CVE-2014-7879 affects users of HP HP-UX versions B.11.11, B.11.23, and B.11.31 when the PAM configuration includes libpam_updbe.
CVE-2014-7879 is an authentication bypass vulnerability allowing unauthorized access to systems.
The potential impacts of CVE-2014-7879 include unauthorized code execution and complete control over affected HP-UX systems.