S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability
# 1  
Old 02-15-2008
S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability

Potential security vulnerabilities have been identified with HP System Management Homepage (SMH) for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting (XSS). The risk is MEDIUM. Could be exploited remotely to allow cross site scripting (XSS).


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. HP-UX

HPUX 11.23 - Sam and Smh.

I've just been on an HP Training Course for HPUXv11.31 and found out about the gui / web for SMH. I never did a course on HP11v23. On our two servers here in the UK that run 11.23 I'm pretty sure that when I typed in "sam" on the command line it went to a sort of smh. (There was a message saying... (2 Replies)
Discussion started by: markp1965
2 Replies

2. HP-UX

SYstem Management Homepage (SMH) Issues - HP-UX 11.11

I have a couple of issues with SMH running on HP-UX 11.11. The version numbers of the modules that I have loaded is below. 1) Does anyone have the "HPUX_EthernetLANEndpoint" or "HPUX_EthernetPort" modules on their server? I am getting errors within the SMH error log stating that these... (2 Replies)
Discussion started by: JDM_Nokia
2 Replies

3. Infrastructure Monitoring

All Things System Management (Blog)

Topics in the System Management blog include the Sun x86 SNMP Hardware Monitoring Agent, Microsoft Integration Updates posted, Sun Integration 1.0 for Microsoft SCOM 2007, Sun Installation Assistant adds 2 more platforms, etc. More... (0 Replies)
Discussion started by: Linux Bot
0 Replies

4. Shell Programming and Scripting

Shell Scripted Document Management System

Over the past 4 -5 years, I have cobbled together a rudimentary 'Document Management System' for a school district I support using Linux Bash Shell scripts.. The purpose of the scripting was to supplement features of a Job Applicant Center that had very simplistic methods of handle file... (1 Reply)
Discussion started by: rmuledeer
1 Replies

5. Red Hat

Central Configurations Management System for Linux

hi all, i am currently implementating project scope for a future enterprise solution provider in the storage area. I was hoping if anyone could help me to answer questions regarding the Central Configurations Management System in the RedHat or other linux distro. In the Unix env. , most of... (2 Replies)
Discussion started by: furrahs@yahoo.c
2 Replies
Login or Register to Ask a Question
ugweb(1M)																 ugweb(1M)

NAME
ugweb - starts the HP-UX User and Group Account Configuration tool SYNOPSIS
[ ] [ ] DESCRIPTION
The HP-UX User and Group Account Configuration tool ( ) is used to manage user accounts and group accounts on the local system. This tool can also be used to manage user accounts on a NIS system. The HP-UX User and Group Account Configuration tool provides both Web-based and terminal user interface. The Web-based interface is launched through the HP System Management Homepage. Superuser privileges are required to access the HP-UX User and Group Account Configuration tool. A user who does not have superuser privi- leges has read-only access to the Local Users, NIS Users and Groups areas in the HP-UX User and Group Account Configuration tool and cannot modify local user accounts, group accounts and NIS User accounts. An attempt will be made to connect to a Mozilla/Netscape Web browser running on the X server defined by the DISPLAY environment variable. If a running Mozilla/Netscape client is found, it will be used, otherwise a new Mozilla/Netscape session will be initiated. This will only happen if the Mozilla/Netscape process is running in the same system as that referenced by the DISPLAY variable, unless the -F option is used. Note: By default, the HP-UX User and Group Account Configuration tool (ugweb) invokes the Mozilla Web browser. If you want to support any other browser (Netscape), set the $BROWSER environment variable as shown below: The terminal user interface is invoked if any of the following conditions are true: o The command is invoked with the option. o The environment variable is not set. The Web-based interface is launched if all the following conditions are true: o The command is invoked with option. o The environment variable is set. o The command is available on the system. If the Web-based interface cannot be launched, invokes the terminal user interface. Options recognizes the following options: Forces a client browser to be used in less secure ways. The option forces the client browser to be used or started, even when the X-traffic between the X-server and the Mozilla browser is not secure. Use this option only when you are sure the network traffic between the host where Mozilla is running and the host in the DISPLAY variable is secure. If cannot start the Web browser, the terminal interface is started. When the HP-UX User and Group Account Configuration Web interface is invoked by SMH, the option is used. If a privileged user (root) executes the command with the option, a temporary login bypass key is generated. The bypass key enables the user to access the Web interface without having to provide login information again. When the HP-UX User and Group Account Configuration interface is started by SMH, the option is used. Launches the terminal interface for managing local users, NIS users and groups regardless of the current setting of the environment variable. You can also start the HP-UX User and Group Account Configuration tool using one of the following methods: o Run and select the Accounts for Users and Groups to launch the tool in Terminal User Interface mode o Start the HP-UX User and Group Account Configuration tool Web interface by typing the URL in the address bar of your browser, where hostname is the name of the server o Launch the HP-UX Systems Insight Manager on the server and select the User and Group Account Configuration tool from the Config- ure -> HP-UX Configuration menu Online Help After the HP-UX User and Group Account Configuration tool is started, the online help provides details on how to use the tool. RETURN VALUES
Upon completion, ugweb returns one of the following values: o 0 Successful o 1 An error occurred AUTHOR
was developed by Hewlett-Packard. ugweb(1M)