Loading...
Loading...
HPUX Secure Shell A.09.03.007 is based on portable openssh 9.3p2, which delivers the fix for CVE-2024-6387 as indicated in Security BulletinHPESBUX04725 rev.1 - Unauthenticated Remote Code Execution vulnerability in HP-UX Secure Shell (RegreSSHion). The banner, however, indicates 9.3p1 (rather than 9.3p2) as shown below, causing remote vulnerability scanners to identify it as vulnerable.# swlist SecureShell...# SecureShell A.09.30.007 HP-UX Secure Shell SecureShell.Secure_Shell A.09.30.007 HP-UX Secure Shell# telnet localhost 22Trying...Connected to 127.0.0.1.Escape character is '^]'.SSH-2.0-OpenSSH_9.3p1+sftpfilecontrol-v1.3-hpn14v20
Any HPE Integrity server with SecureShell A.09.30.00[3-7] HP-UX Secure Shell.
An unofficial fix is available as HP_UX_11i_v3_SecureShell_A.09.30.009_UNOF.depot and is targeted to be included in the next SecureShell release. Contact HPE customer support and refer to a00147241.Contact your localcountry HPE Customer Supportor log a case via theHPE Support Center
Operating Systems Affected:Not Applicable
Click on a version to see all relevant bugs
Hewlett Packard Enterprise Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.