vulnerability alert CVE-2010-0444

HP Operations Agent: user access on Solaris

Synthesis of the vulnerability

When HP Operations Agent is installed on Solaris 10, an attacker can login to the operator account.

Severity: 3/4. Creation date: 08/02/2010.

Description of the vulnerability

The HP Operations Agent product installs two user accounts:  - opc_op : operator  - opc_adm : administrator However, on Solaris 10, the opc_op account is created with no password. When HP Operations Agent is installed on Solaris 10, an attacker can therefore login to the operator account.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: HP Operations Agent: user access on Solaris. Keywords: Agent Operations Solaris access opc_adm opc_op user. Identifiers: BID-38150, c02002298, CVE-2010-0444, HPSBMA02487, SSRT100024, VIGILANCE-VUL-9416.

Information sources

Publications and announces Source example: HPSBMA02487 SSRT100024 rev.1 - HP Operations Agent Running on Solaris 10, Remote Unauthorized Access

Solutions for this vulnerability

Patch or workaround

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Systems vulnerabilities