Specifications

HP Security Advisory #00104 revised: Sec. Vulnerability regarding automountd (rev. 01)

Released May 02, 2000

Affects HP-9000 Series 700/800 HP-UX releases 10.20 and 11.00

Reference http://us-support.external.hp.com/

Problem

- This problem was originally reported in CERT Advisory CA-99-05, regarding the vulnerability in

automountd, which allows an intruder to execute arbitrary commands with the privileges of the

automountd process.

- We had previously reported that Hewlett-Packard platforms were not vulnerable; we now have

new information showing that we are indeed vulnerable.

SAFER

- Patches for this vulnerability are now available from HP.