Secunia Security Advisory - Some vulnerabilities have been reported in HP Performance Manager, which can be exploited by malicious users to disclose sensitive information or to manipulate certain data and by malicious people to disclose sensitive information, manipulate certain data, or cause a DoS (Denial of Service).
32cd1d0c113b0f50d99776c080dd286d4615a7390c02ecedeb94e53baef04329
----------------------------------------------------------------------
Looking for a job?
Secunia is hiring skilled researchers and talented developers.
http://secunia.com/company/jobs/
----------------------------------------------------------------------
TITLE:
HP Performance Manager Apache Tomcat Multiple Vulnerabilities
SECUNIA ADVISORY ID:
SA39847
VERIFY ADVISORY:
http://secunia.com/advisories/39847/
DESCRIPTION:
Some vulnerabilities have been reported in HP Performance Manager,
which can be exploited by malicious users to disclose sensitive
information or to manipulate certain data and by malicious people to
disclose sensitive information, manipulate certain data, or cause a
DoS (Denial of Service).
For more information:
SA35326
SA38316
The vulnerabilities are reported in versions 8.10, 8.20, and 8.21
running on HP-UX, Linux, Solaris, and Windows.
SOLUTION:
Apply patch.
HP-UX (IA):
HPPM8CPI_00001
HP-UX (PA):
HPPM8CPP_00001
Linux:
HPPM8CPL_00001
Solaris:
HPPM8CPS_00001
Windows:
HPPM8CPW_00001
ORIGINAL ADVISORY:
HPSBMA02535 SSRT100029:
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02181353
OTHER REFERENCES:
SA35326:
http://secunia.com/advisories/35326/
SA38316:
http://secunia.com/advisories/38316/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------