CVE-2010-0451
HP-UX B.11.31 - Unauthenticated Filesystem Access via NFS Configuration Change
Title source: llmDescription
The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests.
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/57216
Patch, Vendor Advisory vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=126962272413767&w=2
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39111
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/63243
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/38982
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0731
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1023758
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12025
Scores
EPSS
0.0111
EPSS Percentile
78.4%
Details
CWE
CWE-264
Status
published
Products (2)
hp/hp-ux
11.31
hp/hp-ux
b.11.31
Published
Mar 29, 2010
Tracked Since
Feb 18, 2026