HP VirtualVault Netscape Enterprise Server Vulnerability

Solution:
A temporary solution is to comment out the "vault-auth-log" AddLog line from the NES's obj.conf file.

To fix apply the appropriate patches to correct the problem:

HP-UX 10.24 with VirtualVault A.02.00 US/Canada
HP-UX 10.24 with VirtualVault A.02.00 International:
PHCO_18615
PHSS_18620

HP-UX 10.24 with VirtualVault A.03.00 US/Canada
HP-UX 10.24 with VirtualVault A.03.00 International:
PHCO_18615
PHSS_18616

HP-UX 10.24 with VirtualVault A.03.01 US/Canada
HP-UX 10.24 with VirtualVault A.03.01 International:
PHCO_18615
PHSS_18612

HP-UX 10.24 with VirtualVault A.03.50 US/Canada
HP-UX 10.24 with VirtualVault A.03.50 International
PHCO_18615
PHSS_18621



 

Privacy Statement
Copyright 2010, SecurityFocus