S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability
# 1  
Old 02-15-2008
S-186: HP System Management Homepage (SMH) for HP-UX Vulnerability

Potential security vulnerabilities have been identified with HP System Management Homepage (SMH) for HP-UX. These vulnerabilities could by exploited remotely to allow cross site scripting (XSS). The risk is MEDIUM. Could be exploited remotely to allow cross site scripting (XSS).


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

5 More Discussions You Might Find Interesting

1. HP-UX

HPUX 11.23 - Sam and Smh.

I've just been on an HP Training Course for HPUXv11.31 and found out about the gui / web for SMH. I never did a course on HP11v23. On our two servers here in the UK that run 11.23 I'm pretty sure that when I typed in "sam" on the command line it went to a sort of smh. (There was a message saying... (2 Replies)
Discussion started by: markp1965
2 Replies

2. HP-UX

SYstem Management Homepage (SMH) Issues - HP-UX 11.11

I have a couple of issues with SMH running on HP-UX 11.11. The version numbers of the modules that I have loaded is below. 1) Does anyone have the "HPUX_EthernetLANEndpoint" or "HPUX_EthernetPort" modules on their server? I am getting errors within the SMH error log stating that these... (2 Replies)
Discussion started by: JDM_Nokia
2 Replies

3. Infrastructure Monitoring

All Things System Management (Blog)

Topics in the System Management blog include the Sun x86 SNMP Hardware Monitoring Agent, Microsoft Integration Updates posted, Sun Integration 1.0 for Microsoft SCOM 2007, Sun Installation Assistant adds 2 more platforms, etc. More... (0 Replies)
Discussion started by: Linux Bot
0 Replies

4. Shell Programming and Scripting

Shell Scripted Document Management System

Over the past 4 -5 years, I have cobbled together a rudimentary 'Document Management System' for a school district I support using Linux Bash Shell scripts.. The purpose of the scripting was to supplement features of a Job Applicant Center that had very simplistic methods of handle file... (1 Reply)
Discussion started by: rmuledeer
1 Replies

5. Red Hat

Central Configurations Management System for Linux

hi all, i am currently implementating project scope for a future enterprise solution provider in the storage area. I was hoping if anyone could help me to answer questions regarding the Central Configurations Management System in the RedHat or other linux distro. In the Unix env. , most of... (2 Replies)
Discussion started by: furrahs@yahoo.c
2 Replies
Login or Register to Ask a Question
hpsmh(1M)																 hpsmh(1M)

NAME
hpsmh - starts or stops the HP System Management Homepage server SYNOPSIS
DESCRIPTION
The HP System Management Homepage is the management server for web-based System Administration tools. In order to use HPSMH, start a web browser on your desktop or workstation, and type in the URL or Address of the server to be managed: By default, the HP SMH management server under HP-UX only starts on demand. It does not run continually. A daemon listens on port 2301 to start an instance of the management server. The above URL automatically starts the management server, then redirects your browser to the secure port from which to login: The command starts or stops the HPSMH server. If no options are specified, displays the possible options. Options The command supports the followings options: Starts the HPSMH Server if is not currently running Stops the HPSMH Server Access Control By default, only the root user can login to HPSMH. Within HPSMH you can configure additional user groups to have HPSMH access. You must be a superuser to run the command. Certificates Installing HPSMH will generate an SSL self signed certificate. Because this certificate is self signed, when connecting to HPSMH your web browser will prompt you with a warning that the certificate was issued by a web site, company or Certificate Authority you have not chosen to trust. It is possible to proceed by accepting this self signed certificate temporarily for each session. You can also view and install (accept permanently) this certificate to avoid this warning in the future. HPSMH also supports installation of certificates created by a Certifi- cate Authority. RETURN VALUES
The command returns: upon successful completion if the command failed EXAMPLES
Starts HPSMH Server: Stops HPSMH Server: Shows options: Using HPSMH, start a browser and enter the following URL: AUTHORS
was developed by Hewlett-Packard SEE ALSO
smhstartconfig(1M). hpsmh(1M)