CVE-2009-2680

Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors.

CVSS v2.0 8.5 HIGH

8.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:C

Exploitability : 10.0 / Impact : 7.8

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact COMPLETE

References

Link	Resource
http://securitytracker.com/id?1022905
http://www.securityfocus.com/bid/36388
http://secunia.com/advisories/36764	Vendor Advisory
http://www.vupen.com/english/advisories/2009/2662	Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405	Patch Vendor Advisory
http://www.osvdb.org/58131
https://exchange.xforce.ibmcloud.com/vulnerabilities/53237

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:hp:storageworks_1\/8_g2_tape_autoloader::::::::
	cpe:2.3:h:hp:storageworks_msl2024_tape_library::::::::
	cpe:2.3:h:hp:storageworks_msl4048_tape_library::::::::
	cpe:2.3:h:hp:storageworks_msl8096_tape_library::::::::

Information

Published : 2009-09-24 09:30

Updated : 2017-08-16 18:30

NVD link : CVE-2009-2680

Mitre link : CVE-2009-2680

JSON object : View

CWE

NVD-CWE-noinfo

Advertisement

Products Affected

hp

storageworks_msl2024_tape_library
storageworks_msl8096_tape_library
storageworks_msl4048_tape_library
storageworks_1\/8_g2_tape_autoloader

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://securitytracker.com/id?1022905", "name": "1022905", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/36388", "name": "36388", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/36764", "name": "36764", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2009/2662", "name": "ADV-2009-2662", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01868405", "name": "SSRT080134", "tags": ["Patch", "Vendor Advisory"], "refsource": "HP"}, {"url": "http://www.osvdb.org/58131", "name": "58131", "tags": [], "refsource": "OSVDB"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/53237", "name": "storageworks-rmi-dos(53237)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in the Remote Management Interface (RMI) for MSL Tape Libraries and 1/8 G2 Tape Autoloaders in HP StorageWorks 1/8 G2 Tape Autoloader firmware 2.30 and earlier, MSL2024 Tape Library firmware 4.20 and earlier, MSL4048 Tape Library firmware 6.50 and earlier, and MSL8096 Tape Library firmware 8.90 and earlier allows remote attackers to cause a denial of service via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-2680", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:C", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 7.8, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-09-24T16:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:hp:storageworks_1\\/8_g2_tape_autoloader:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "2.30"}, {"cpe23Uri": "cpe:2.3:h:hp:storageworks_msl2024_tape_library:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.20"}, {"cpe23Uri": "cpe:2.3:h:hp:storageworks_msl4048_tape_library:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "6.50"}, {"cpe23Uri": "cpe:2.3:h:hp:storageworks_msl8096_tape_library:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "8.90"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-17T01:30Z"}