Vigil@nce - HP Operations Agent: user access on Solaris


we track for your security since 1999

resources

Vigil@nce describes vulnerabilities impacting your systems, and offers solutions to correct them.

recent vulnerabilities

tracked products

RSS feed

vulnerability

vulnerability alert CVE-2010-0444 HP Operations Agent: user access on Solaris
Synthesis of the vulnerability

When HP Operations Agent is installed on Solaris 10, an attacker can login to the operator account.

Severity: 3/4.
Consequences: privileged access/rights.
Provenance: intranet client.
Means of attack: no proof of concept, no attack.
Ability of attacker: expert (4/4).
Confidence: confirmed by the editor (5/5).
Diffusion of the vulnerable configuration: high (3/3).
Creation date: 08/02/2010.

Impacted products

Description of the vulnerability

The HP Operations Agent product installs two user accounts: - opc_op : operato...

Characteristics

Title: HP Operations Agent: user access on Solaris
Identifiers: BID-38150, c02002298, CVE-2010-0444, HPSBMA02487, SSRT100024, VIGILANCE-VUL-9416.
Url: https://vigilance.fr/tree/1/9416