VID |
16112 |
Severity |
20 |
Port |
69 |
Protocol |
UDP |
Class |
TFTP |
Detailed Description |
A TFTP server running on the relevant host is serving one or more sensitive HP Ignite-UX files. Trivial File Transfer Protocol (TFTP) is a protocol that allows for easy transfer of files without requiring authentication between network-connected devices. HP Ignite-UX can use a TFTP server to facilitate anonymous access to configuration data files. These Ignite-UX files potentially may include sensitive information about the hardware and software configuration of the HPUX host, so should be considered extremely sensitive and should not be exposed to un-trusted sources.
* Platforms Affected: Any TFTP server Any version HP Ignite-UX Any version Hewlett-Packard Company, HP-UX Any version |
Recommendation |
Consider disabling the affected TFTP server if it is not required. Otherwise restrict access to trusted hosts only. |
Related URL |
(CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|