Need help getting info on CVE's.

[Andy Imm]

Hello,

I have hpux 11.31 servers. I am trying to check and see if our servers meet CVE compliance.

I am looking for the following CVE's;
CVE-2009-2906
CVE-2009-2948
CVE-2009-1888

Thanks in advance.

[Denver Osborn]

Are you looking for details on each of these CVE's or need help looking at your system's details related to each CVE?

If you just need to review the CVE, I've found this site helpful.

http://www.cvedetails.com

On the left side nav bar, just enter the CVE in the "View CVE:" box and click go.

-denver

[Andy Imm]

Hello,

I was wondering more how it pertained to HP-UX11.31. I found from HP support that you can go to the ITRC, Select "Search Knowledge Base" search by Doc ID, then search the CVE.

[Denver Osborn]

These pertain to Samba which is HP's CIFS product suite based on opensource samba. The HP Sec Bulletin on CVE-2009-2906 says you should have at least rev A.02.04.01 installed.

To check the version of CIFS Server...
/usr/sbin/swlist -l product |grep -i cifs

You can download the latest rev from http://software.hp.com, search on CIFS.


-denver

[Andy Imm]

Thank you Denver for your response.

Going by the knowledgebase IDs, I was able to find that we were compliant.

Thanks again.

Andy