|
Family: General --> Category: destructive_attack
TFTP directory permissions (HP Ignite-UX) Vulnerability Scan
Vulnerability Scan Summary Acertains if the remote host has writeable directories exposed via TFTP (HP Ignite-UX)
Detailed Explanation for this Vulnerability Test
The remote host has a vulnerable version of the HP Ignite-UX application
installed that exposes a world-writeable directory to anonymous TFTP access.
Solution: Upgrade to a version of the Ignite-UX application that does not exhibit
this behaviour. If it is not required, disable or uninstall the TFTP server.
Otherwise restrict access to trusted sources only.
See also : http://www.corsaire.com/advisories/c041123-002.txt
Risk factor: High
Click HERE for more information and discussions on this network vulnerability scan.
|