----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

Join the FREE BETA test of the Network Software Inspector (NSI)!
http://secunia.com/network_software_inspector/

The NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,000 different Windows applications.

----------------------------------------------------------------------

TITLE:
HP StorageWorks Command View Advanced Edition for XP Unauthorized
User Account Access

SECUNIA ADVISORY ID:
SA25029

VERIFY ADVISORY:
http://secunia.com/advisories/25029/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
Local system

SOFTWARE:
HP StorageWorks Command View Advanced Edition for XP 5.x
http://secunia.com/product/14026/
HP StorageWorks XP Replication Monitor 1.x
http://secunia.com/product/14027/
HP StorageWorks XP Replication Monitor 5.x
http://secunia.com/product/14028/
HP StorageWorks XP Tiered Storage Manager 1.x
http://secunia.com/product/14029/
HP StorageWorks XP Tiered Storage Manager 5.x
http://secunia.com/product/14030/

DESCRIPTION:
A vulnerability has been reported in HP StorageWorks Command View
Advanced Edition for XP, which potentially can be exploited by
malicious, local users to gain access to other users' accounts.

The vulnerability is caused due to an unspecified error within the
new user registration or addition process. No further information is
available.

The vulnerability reportedly affects the following products and
versions:
* HP StorageWorks Command View Advanced Edition for XP v 5.0.0-00 to
v 5.1.0-05 and v 5.5.0-00 to v 5.5.0-02 
* HP StorageWorks XP Replication Monitor v 1.1.0-00 and v 5.0.0-00 to
v 5.5.0-02
* HP StorageWorks XP Tiered Storage Manager v 1.1.0-00 and v 5.0.0-00
to v 5.5.0-01

when at least one of the following Lines/Models is installed on a
single server:
* HP StorageWorks Command View Device Manager
* HP StorageWorks Command View Global Link Availability Manager
* HP StorageWorks Command View Replication Monitor
* HP StorageWorks Command View Tiered Storage Manager
* HP StorageWorks Command View Tuning Manager

SOLUTION:
Apply updates.
http://welcome.hp.com/country/us/en/support.html?pageDisplay=drivers


HP StorageWorks Command View Advanced Edition for XP:
* Install v 5.6.0-01 or subsequent

HP StorageWorks XP Replication Monitor:
* Install v 5.6.0-01 or subsequent

HP StorageWorks XP Tiered Storage Manager:
* Install v 5.5.0-02 or subsequent

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
HPSBST02200 SSRT071330:
http://www4.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBST02200

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------