HP-UX PHSS_35437 : s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update

high Nessus Plugin ID 23715

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.04 Webproxy server 2.1 (Apache 2.x) update :

The remote HP-UX host is affected by multiple vulnerabilities :

- A security vulnerability has been identified in OpenSSL used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy that may allow remote unauthorized access. (HPSBUX02165 SSRT061266)

- Potential security vulnerabilities have been identified with Apache running on HP-UX VirtualVault. These vulnerabilities could be exploited remotely to allow execution of arbitrary code, Denial of Service (DoS), or unauthorized access. (HPSBUX02172 SSRT061269)

Solution

Install patch PHSS_35437 or subsequent.

See Also

http://www.nessus.org/u?2e53f82c

http://www.nessus.org/u?a13a9b59

Plugin Details

Severity: High

ID: 23715

File Name: hpux_PHSS_35437.nasl

Version: 1.19

Type: local

Published: 11/22/2006

Updated: 1/11/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

CVSS v2

Risk Factor: High

Base Score: 7.6

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/31/2006

Vulnerability Publication Date: 12/5/2005

Exploitable With

Core Impact

Metasploit (Apache Module mod_rewrite LDAP Protocol Buffer Overflow)

Reference Information

CVE: CVE-2005-3352, CVE-2005-3357, CVE-2005-3747, CVE-2006-3747, CVE-2006-4339

BID: 15834, 16152, 19204, 19849

CWE: 189, 200, 310

HP: HPSBUX02165, HPSBUX02172, SSRT061266, SSRT061269, emr_na-c00794048, emr_na-c00797078