---------------------------------------------------------------------- Secunia integrated with Microsoft WSUS http://secunia.com/blog/71/ ---------------------------------------------------------------------- TITLE: HP Operations Agent "opc_op" Account Password Security Issue SECUNIA ADVISORY ID: SA38489 VERIFY ADVISORY: http://secunia.com/advisories/38489/ DESCRIPTION: A security issue has been reported in HP Operations Agent, which can be exploited by malicious people to compromise a vulnerable system. The security issue is caused due to the application setting no password for the "opc_op" user account and can be exploited to gain system access. The security issue is reported in HP Operations Agent version 8.51, 8.52, 8.53, and 8.60, running on Solaris 10. SOLUTION: Restrict access to the "opc_op" account. Please see the vendor's advisory for workaround details. PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: HPSBMA02487 SSRT100024: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02002298 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------