[11313] in bugtraq
(Security) Compaq Insight Manager Advisory
daemon@ATHENA.MIT.EDU (Jason R. Rhoads)
Mon Aug 9 16:46:32 1999
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="------------26925E11A3DE6A65AE9274F6"
Message-Id: <37AB7990.A5C6EB94@net.com>
Date: Fri, 6 Aug 1999 17:10:56 -0700
Reply-To: "Jason R. Rhoads" <jason_rhoads@NET.COM>
From: "Jason R. Rhoads" <jason_rhoads@NET.COM>
X-To: bugtraq@securityfocus.com
To: BUGTRAQ@SECURITYFOCUS.COM
This is a multi-part message in MIME format.
--------------26925E11A3DE6A65AE9274F6
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
--------------26925E11A3DE6A65AE9274F6
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Return-Path: <owner-security@data.service.digital.com>
Received: from unet.net.com ([134.56.112.30]) by west-mail.net.com
(Netscape Messaging Server 3.6) with SMTP id AAA73BE
for <jason_rhoads@west-mail>; Fri, 6 Aug 1999 16:59:25 -0700
Received: from ns2.net.com by unet.net.com (SMI-8.6/SMI-SVR4)
id QAA28812; Fri, 6 Aug 1999 16:56:36 -0700
Received: from data.service.digital.com (data.service.digital.com [192.208.35.22])
by ns2.net.com (8.9.3/8.9.3) with SMTP id QAA12186
for <jason_rhoads@net.com>; Fri, 6 Aug 1999 16:59:29 -0700 (PDT)
Received: by data.service.digital.com (5.65v4.0/1.1.10.5/06Nov97-0106PM)
id AA13806; Wed, 7 Jul 1999 13:20:55 -0600
Message-Id: <A91153F2C4BDD11193E60000F81E941605109855@cxoexc2.cxo.dec.com>
From: "Boren, Rich" <Rich.Boren@COMPAQ.com>
To: "'security@data.service.digital.com'"
<security@data.service.digital.com>
Subject: (Security) Compaq Insight Manager Advisory
Date: Wed, 7 Jul 1999 14:16:54 -0500
X-Ms-Tnef-Correlator: <A91153F2C4BDD11193E60000F81E941605109855@cxoexc2.cxo.dec.com>
Mime-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2559.0)
Content-Type: multipart/mixed;
boundary="----_=_NextPart_000_01BEC8AD.69960C72"
Sender: owner-security@data.service.digital.com
Precedence: bulk
Reply-To: patch-announcements@service.digital.com
X-Mozilla-Status2: 00000000
----------------------------------------------------------------------
Software Security Advisories Announcements
------------------------------------------
This message contains the updates on the latest patches posted at
ftp.service.digital.com. You're receiving this message as a
subscriber to the security mailing list.
If you ever want to remove yourself from this mailing list, you can
send mail to <Majordomo@data.service.digital.com> with the following
command in the body of your email message:
unsubscribe security (your full email address receiving this mail)
----------------------------------------------------------------------
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_000_01BEC8AD.69960C72
Content-Type: text/plain;
charset="iso-8859-1"
* No Restrictions For Distribution *
______________________________________________________
UPDATE:
TITLE: New Version of the Insight Manager Web Agent
for Compaq's Tru64/Digital UNIX V4.0f Only.
Cross-Ref: # SSRT0612U and
"Compaq Management Agents Security Advisory"
Located at http://www.compaq.com/sysmanage
SOURCE: Compaq Computer Corporation
Software Security Response Team
"Compaq is broadly distributing this Security Advisory in order
to bring to the attention of users of Compaq products the
important security information contained in this Advisory.
Compaq recommends that all users determine the applicability of
this information to their individual situations and take
appropriate action.
Compaq does not warrant that this information is necessarily
accurate or complete for all user situations and, consequently,
Compaq will not be responsible for any damages resulting from
user's use or disregard of the information provided in this
Advisory."
----------------------------------------------------------------------
IMPACT:
This patch fixes a potential security vulnerability in the web-enabling
portion of the Compaq Insight Management Agents for Tru64 UNIX.
This security vulnerability may allow read access to files whose location
and filename are known and located on the same file system where the
agents are installed.
NOTE: Compaq Management Agents for Compaq OpenVMS are not
affected in any way.
----------------------------------------------------------------------
RESOLUTION:
This potential security vulnerability has been resolved and a
patch for this problem has been made available for
Tru64/DIGITAL UNIX V4.0f with or without Patch Kit 1.
*This solution will be included in future distributed releases of
Compaq's DIGITAL UNIX.
This patch may be obtained from the World Wide Web at the
following FTP address:
http://www.service.digital.com/patches
Patch file name: SSRT0612U_im_upd06991.tar
Use the FTP access option via browse patch tree,
select DIGITAL_UNIX directory then choose the appropriate
version directory and download the patch accordingly.
Note:
There is a README file (ssrt0612u_im_upd06991.README)
with this patch.
Additional Considerations:
If you need further information, please contact your normal
Compaq Services support channel.
Compaq appreciates your cooperation and patience. We regret any
inconvenience applying this information may cause.
As always, Compaq urges you to periodically review your system
management and security procedures.
Compaq will continue to review and enhance the security
features of its products and work with customers to maintain and
improve the security and integrity of their systems.
__________________________________________________________
Copyright (c) Compaq Computer Corporation, 1999 All
Rights Reserved.
Unpublished Rights Reserved Under The Copyright Laws Of
The United States.
__________________________________________________________
------_=_NextPart_000_01BEC8AD.69960C72
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64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------_=_NextPart_000_01BEC8AD.69960C72--
--------------26925E11A3DE6A65AE9274F6--
