[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of I
From:       security-alert () hp ! com
Date:       2008-04-24 20:23:13
Message-ID: 20080424202314.515D63BA0 () hpchs ! cup ! hp ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c01439758
Version: 1

HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote \
Disclosure of Information and Execution of Arbitrary Code

NOTICE: The information in this Security Bulletin should be acted upon as soon as \
possible.

Release Date: 2008-04-24
Last Updated: 2008-04-24


Potential Security Impact: Remote disclosure of information and execution of \
arbitrary code 

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY
A potential vulnerability has been identified with the HPeDiag ActiveX control which \
is a component of HP Software Update running under windows. The vulnerability could \
be exploited to allow remote disclosure of information and execution of arbitrary \
code. 

References: CVE-2008-0712

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.
Any PC with HP Software Update v4.000.009.002 or earlier running on Windows

BACKGROUND

CVSS 2.0 Base Metrics 
===============================================
Reference                         Base Vector               Base Score 
CVE-2008-0712     (AV:N/AC:L/Au:N/C:P/I:P/A:N)     6.4
===============================================
Information on CVSS is documented in HP Customer Notice: HPSN-2008-002.


The Hewlett-Packard Company thanks Chew Keong TAN of vuln.sg for reporting this \
vulnerability to security-alert@hp.com.

Note: 

HP Software Update is an HP application which checks for and downloads updates for HP \
products firmware, software, and drivers. It can also help update the security and \
functionality of HP products. HP Software Update may be installed on a PC as part of \
the software supplied with certain HP PCs, printers, scanners, or cameras Customers \
can also download the HP Software Update for installation from the HP Web Site. 

RESOLUTION
HP has provided the following update to HP Software Update to resolve this potential \
vulnerability. After update, HP Software Update should be at least v4.000.010.008.

Use the following procedure to resolve this vulnerability:

1. In Windows click Start ->All Programs ->HP ->HP Update 
or 
click Start ->All Programs ->HP ->HP Software Update 

2. Click Next. HP Software Update will begin. 

3. Click Next to begin the installation. Click Continue or OK if prompted by Windows \
to continue. 

4. The HP Update installer will appear. Click Continue or OK if prompted by the \
installer to continue. 

5. Click Finish to close HP Software Update when prompted.

Notes: 

1. If HP Software Update is reinstalled using the recovery solution, the procedure \
above must be repeated.

2. On a PC where HP Software Update is present, the procedure above must be followed \
even if HP Software Update is never used.

3. This resolution applies the Windows Registry kill bit to the following CLSIDs:

{60178279-6D62-43af-A336-77925651A4C6} 
{DC4F9DA0-DB05-4BB0-8FB2-03A80FE98772} 
{0C378864-D5C4-4D9C-854C-432E3BEC9CCB} 
{93441C07-E57E-4086-B912-F323D741A9D8} 
{CDAF9CEC-F3EC-4B22-ABA3-9726713560F8} 
{CF6866F9-B67C-4B24-9957-F91E91E788DC} 
{A95845D8-8463-4605-B5FB-4F8CFBAC5C47} 
{B9C13CD0-5A97-4C6B-8A50-7638020E2462} 
{C70D0641-DDE1-4FD7-A4D4-DA187B80741D} 
{DE233AFF-8BD5-457E-B7F0-702DBEA5A828} 
{AB049B11-607B-46C8-BBF7-F4D6AF301046} 
{910E7ADE-7F75-402D-A4A6-BB1A82362FCA} 
{42C68651-1700-4750-A81F-A1F5110E0F66} 
{BF931895-AF82-467A-8819-917C6EE2D1F3} 
{4774922A-8983-4ECC-94FD-7235F06F53A1} 
{E12DA4F2-BDFB-4EAD-B12F-2725251FA6B0} 
{C94188F6-0F9F-46B3-8B78-D71907BD8B77} 
{6470DE80-1635-4B5D-93A3-3701CE148A79} 
{17E67D4A-23A1-40D8-A049-EE34C0AF756A} 
{AB237044-8A3B-42BB-9EE1-9BFA6721D9ED} 
{784F2933-6BDD-4E5F-B1BA-A8D99B603649} 

PRODUCT SPECIFIC INFORMATION 
None 

HISTORY 
Version: 1 (rev.1) - 24 April 2008 Initial release 

Support: For further information, contact normal HP Services support channel.

Report: To report a potential security vulnerability with any HP supported product, \
send Email to: security-alert@hp.com  It is strongly recommended that security \
related information being communicated to HP be encrypted using PGP, especially \
exploit information.  To get the security-alert PGP key, please send an e-mail \
message as follows:  To: security-alert@hp.com 
  Subject: get key

Subscribe: To initiate a subscription to receive future HP Security Bulletins via \
Email:  http://h30046.www3.hp.com/driverAlertProfile.php?regioncode=NA&langcode=USENG&jumpid=in_SC-GEN__driverITRC&topiccode=ITRC \
 On the web page: ITRC security bulletins and patch sign-up 
Under Step1: your ITRC security bulletins and patches 
  - check ALL categories for which alerts are required and continue.
Under Step2: your ITRC operating systems 
  - verify your operating system selections are checked and save.


To update an existing subscription: http://h30046.www3.hp.com/subSignIn.php 
Log in on the web page: Subscriber's choice for Business: sign-in. 
On the web page: Subscriber's Choice: your profile summary - use Edit Profile to \
update appropriate sections.


To review previously published Security Bulletins visit: \
http://www.itrc.hp.com/service/cki/secBullArchive.do 


* The Software Product Category that this Security Bulletin relates to is represented \
by the 5th and 6th characters of the Bulletin number in the title: 

GN = HP General SW
MA = HP Management Agents
MI = Misc. 3rd Party SW
MP = HP MPE/iX
NS = HP NonStop Servers
OV = HP OpenVMS
PI = HP Printing & Imaging
ST = HP Storage SW
TL = HP Trusted Linux
TU = HP Tru64 UNIX
UX = HP-UX
VV = HP VirtualVault
 

System management and security procedures must be reviewed frequently to maintain \
system integrity. HP is continually reviewing and enhancing the security features of \
software products to provide customers with current secure solutions.


"HP is broadly distributing this Security Bulletin in order to bring to the attention \
of users of the affected HP products the important security information contained in \
this Bulletin. HP recommends that all users determine the applicability of this \
information to their individual situations and take appropriate action. HP does not \
warrant that this information is necessarily accurate or complete for all user \
situations and, consequently, HP will not be responsible for any damages resulting \
from user's use or disregard of the information provided in this Bulletin. To the \
extent permitted by law, HP disclaims all warranties, either express or implied, \
including the warranties of merchantability and fitness for a particular purpose, \
title and non-infringement."

©Copyright 2008 Hewlett-Packard Development Company, L.P. 

Hewlett-Packard Company shall not be liable for technical or editorial errors or \
omissions contained herein. The information provided is provided "as is" without \
warranty of any kind. To the extent permitted by law, neither HP or its affiliates, \
subcontractors or suppliers will be liable for incidental, special or consequential \
damages including downtime cost; lost profits; damages relating to the procurement of \
substitute products or services; or damages for loss of data, or software \
restoration. The information in this document is subject to change without notice. \
Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein \
are trademarks of Hewlett-Packard Company in the United States and other countries. \
Other product and company names mentioned herein may be trademarks of their \
                respective owners.
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBSBDbp+AfOvwtKn1ZEQKlgACgnxTEJvdP+6i1a3Hy4a+mJ2td82sAoMAx
+Gs88kRk58SGm3onob78OCXY
=mFbk
-----END PGP SIGNATURE-----


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic