Signature Detail
Short Name |
TFTP:FILE:PASSWD-MAKREC |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
TFTP |
Keywords |
HP Ignite-UX Password File Retrieval |
Release Date |
2005/09/12 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TFTP: HP Ignite-UX Password File Retrieval
This signature detects retrieval of the system password file through TFTP. By default, HP Ignite-UX maintains a copy of the system password file in a known location. Malicious users can retrieve the password file and attempt to gain administrative access to the system.
Extended Description
During installation, Ignite-UX can use a TFTP server for remote access. Under some circumstances, a copy of the passwd file will be stored in the TFTP server path.
Affected Products
- HP HP-UX B.11.00
- HP HP-UX B.11.11
- HP HP-UX B.11.22
- HP HP-UX B.11.23
- HP Ignite-UX
References
- BugTraq: 14568
- CVE: CVE-2004-0951
- URL: http://www.corsaire.com/advisories/c041123-001.txt