bugtraq - Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 15 Nov 2007 17:15:30 +0000
From: "Nick Boyce" <nick.boyce@...il.com>
To: Bugtraq <bugtraq@...urityfocus.com>
Cc: security-alert@...com
Subject: Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges

On Nov 12, 2007 7:57 PM,  <security-alert@...com> wrote:

> HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges
[...]
> SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
> HP-UX B.11.11, B.11.23, and B.11.31 running HP Secure Shell

If there's anyone from HP here, can you clarify whether or not HPUX
11.00 is omitted from the impacted list because it's not supported or
because it's not affected - thanks.

I know 11.00 is no longer supported, but we have a system running
"HP-UX Secure Shell A.04.10.004" on HP-UX 11.00 that we cannot upgrade
(due to application dependency), and I'd just like to know what our
exposure is.

The verbose product description is "HP-UX Secure Shell
A.04.10.004/005, based on OpenSSH 4.1p1", part number T1471-90004.

You don't have to go on the record - be as anonymous as you need.

Thanks
Nick Boyce
-- 
"The system is repaired when ordinary greed takes over from
extraordinary fear - and that's what we're working towards."
Prof Larry Summers, US Treasury Secretary 1999-2001, commenting on the
Northern Rock banking crisis on BBC Newsnight, 14th.Sept.2007
My, what a high civilisation we've built.