Vulnerability CVE-2009-4184
Published: 2010-02-03   Modified: 2012-02-13

Description:
Unspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database via unknown vectors.

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:S/C:C/I:C/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.2/10
9.2/10
3.1/10
Exploit range
Attack complexity
Authentication
Local
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
None
Affected software
HP -> Enterprise cluster master toolkit 

 References:
http://www.vupen.com/english/advisories/2010/0272
http://www.securitytracker.com/id?1023523
http://www.securityfocus.com/bid/38035
http://secunia.com/advisories/38423
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8305
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12172
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01894850
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01894850
Copyright 2024, cxsecurity.com

 

Back to Top