HP-UX PHSS_35459 : s700_800 11.04 Virtualvault 4.6 IWS update

High Nessus Plugin ID 23717


The remote HP-UX host is missing a security-related patch.


s700_800 11.04 Virtualvault 4.6 IWS update :

The remote HP-UX host is affected by multiple vulnerabilities :

- Two potential security vulnerabilities have been reported in HP-UX VirtualVault Apache HTTP server versions prior to Apache 1.3.37 that may allow a Denial of Service (DoS) attack and execution of arbitrary code.
(HPSBUX02164 SSRT061265)

- A security vulnerability has been identified in OpenSSL used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy that may allow remote unauthorized access. (HPSBUX02165 SSRT061266)


Install patch PHSS_35459 or subsequent.

See Also



Plugin Details

Severity: High

ID: 23717

File Name: hpux_PHSS_35459.nasl

Version: $Revision: 1.15 $

Type: local

Published: 2006/11/22

Modified: 2016/11/18

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.6

Temporal Score: 6.3

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2006/10/31

Exploitable With

Core Impact

Metasploit (Apache Module mod_rewrite LDAP Protocol Buffer Overflow)

Reference Information

CVE: CVE-2005-3352, CVE-2006-3352, CVE-2006-3747, CVE-2006-4339

BID: 19204, 19849

HP: emr_na-c00794047, emr_na-c00794048, HPSBUX02164, HPSBUX02165, SSRT061265, SSRT061266

CWE: 189, 310