Description
The logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password status, which allows remote attackers to obtain privileges when certain "password issues" are not detected.
References
- oval:org.mitre.oval:def:5779 vdb-entry signature
- 26873 third-party-advisory
- 1018709 vdb-entry
- HPSBUX02259 vendor-advisory
- ADV-2007-3230 vdb-entry
- hpux-logins-unauthorized-access(36702) vdb-entry
- 25740 vdb-entry