CVE-2014-7879: High severity hpe hp-ux vulnerability

Published Dec 10, 2014

Updated

HP HP-UX B.11.11, B.11.23, and B.11.31, when the PAM configuration includes libpamupdbe, allows remote authenticated users to bypass authentication, and consequently execute arbitrary code, via unspecified vectors.

Affected Software

3 affected components

HPE HP-UX=b.11.11

HPE HP-UX=b.11.23

HPE HP-UX=b.11.31

Remediation

Patch Available

https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04511778

Event History

Dec 10, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-7879?

CVE-2014-7879 is considered to have a high severity due to the ability for remote authenticated users to bypass authentication and execute arbitrary code.

How do I fix CVE-2014-7879?

To fix CVE-2014-7879, it is recommended to update the PAM configuration to eliminate the use of libpam_updbe or apply relevant patches from HP.

Who is affected by CVE-2014-7879?

CVE-2014-7879 affects users of HP HP-UX versions B.11.11, B.11.23, and B.11.31 when the PAM configuration includes libpam_updbe.

What type of vulnerability is CVE-2014-7879?

CVE-2014-7879 is an authentication bypass vulnerability allowing unauthorized access to systems.

What are the potential impacts of CVE-2014-7879?

The potential impacts of CVE-2014-7879 include unauthorized code execution and complete control over affected HP-UX systems.