----------------------------------------------------------------------


Looking for a job?


Secunia is hiring skilled researchers and talented developers.


http://secunia.com/company/jobs/


----------------------------------------------------------------------

TITLE:
HP System Management Homepage TLS/SSL Vulnerability

SECUNIA ADVISORY ID:
SA39777

VERIFY ADVISORY:
http://secunia.com/advisories/39777/

DESCRIPTION:
HP has acknowledged a vulnerability in HP System Management Homepage,
which can be exploited by malicious people to manipulate certain
data.

For more information:
SA37291

The vulnerability is reported in versions prior to 6.1 running on
Windows, Linux (x86), and Linux (AMD64/EM64T).

SOLUTION:
Update to version 6.1.0.102 for Windows and to version 6.1.0-103 for
Linux.

HP System Management Homepage 6.1.0.102 for Windows:
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?swItem=MTX-1b189d95582249b58d9ca94c45

HP System Management Homepage 6.1.0-103 for Linux (x86):
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?swItem=MTX-4311cc1b61fd42a4874b13d714

HP System Management Homepage 6.1.0-103 for Linux (AMD64/EM64T):
http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?swItem=MTX-6a3f2fa832db4ddf9b3398f04c

ORIGINAL ADVISORY:
HPSBMA02534 SSRT090180:
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02171256

OTHER REFERENCES:
SA37291:
http://secunia.com/advisories/37291/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------