CVE-2010-0451

The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests.

Score

CVSS 2.0 4.0 Medium

Status

Modified - hp-security-alert@hp.com

Published

2010-03-29

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Hp-ux (Hp)

References

• http://marc.info/?l=bugtraq&m=126962272413767&w=2
• http://osvdb.org/63243
• http://secunia.com/advisories/39111
• http://securitytracker.com/id?1023758
• http://www.securityfocus.com/bid/38982
• http://www.vupen.com/english/advisories/2010/0731
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57216
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12025