CVE-2008-1662 Missing authorization in n/a

Critical 10.0 Published 1 Aug 2008 Updated 7 Aug 2024

Remote attackers can read or modify arbitrary files in HP-UX SAM when configuring NFS with an empty systems list.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2008-1662?

CVE-2008-1662 is a critical missing authorization vulnerability in Hp Hp-Ux, published on 1 Aug 2008. It can be exploited over the network, with no action from the victim.

Official description

Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an "empty systems list."

Weakness: CWE-16

Which versions are affected by CVE-2008-1662?

It affects 2 products.

Products include Hp Hp-Ux, Hp System Administration Manager.

How do I fix CVE-2008-1662?

No fix has been published for CVE-2008-1662 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2008-1662 being exploited?

There is no known exploitation of CVE-2008-1662 in the wild and no public exploit code.

All Hp Hp-Ux vulnerabilities

Sources

Also known as GHSA-f2vr-vv3c-r59r.