Jump to content 日本-日本語
日本HPホーム 製品とサービス サポートとドライバ ソリューション ご購入方法
≫ お問い合わせ
日本HPホーム
企業ユーザ向けサポート情報   >  HP-UX サポート  >  セキュリティ報告&パッチダイジェスト翻訳版

PHSS_36871 11.31 HP System Management Homepage A.2.2.6.2

企業ユーザ向けサポート情報

HP-UX サポート
Tru64 サポート
OpenVMS サポート
セキュリティ報告&パッチダイジェスト翻訳版
技術情報ツリー
ソフトウェアアップデート情報
ITRC日本フォーラム

ITRC

パッチデータベース
技術情報ベースの検索
サポートケースマネージャ
ソフトウェア アップデート マネージャ (SUM)
ご利用の手順
日本HPサイトマップ
コンテンツに進む
パッチ名:   PHSS_36871

パッチ摘要: 11.31 HP System Management Homepage A.2.2.6.2

作成日:  07/07/31

公開日:  07/08/21

ハードウェアプラットフォームおよびOSリリース:

	11.31

現象:

	PHSS_36871:

	1. 不具合:JAGag44079 SR#:8606491907
	エンドユーザーが、HP SIMの代わりにHP SMHを使ってSinge-Task-Execution
	(STE)操作を行うと、エラーが起きることがあります。影響のあるHP SIM操作
	は、Disk Threshold、Replicate Agent Settings、およびInstall Software
	and Firmwareです。

	2. 不具合:JAGag44433 SR#:8606492262
	エンドユーザーが、URLパラメータが適切に検証されないという問題に遭遇す
	ることがあります。

問題点の説明:

	PHSS_36871:

	1. 不具合:JAGag44079 SR#:8606491907
	Single-Task-Execution(STE)操作時に、HP SMHは、HP SIMから要求されたター
	ゲットURLを無視していました。

	2. 不具合:JAGag44433 SR#:8606492262
	SMHは、要求されたURLの一部として渡されたパラメータを適切に検証していま
	せんでした。

-----------------------------------------------------------------------------
Patch Name: PHSS_36871

Patch Description: 11.31 HP System Management Homepage A.2.2.6.2

Creation Date: 07/07/31

Post Date: 07/08/21

Hardware Platforms - OS Releases: 
	11.31

Products: 
	HP System Management Homepage A.2.2.6.2

Filesets: 
	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_PA,v=HP
	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_IA,v=HP

Automatic Reboot?: No

Status: General Release

Critical: No

Category Tags: 
	defect_repair general_release

Path Name: /hp-ux_patches/11.X/PHSS_36871

Symptoms: 
	PHSS_36871:

	1. Defect: JAGag44079  SR#: 8606491907
	   End-user could experience failure in certain
	   Singe-Task-Execution (STE) operations performed by
	   HP SMH on behalf of HP SIM. Possible HP SIM operations
	   affected could include Disk Threshold, Replicate Agent
	   Settings, and Install Software and Firmware.

	2. Defect: JAGag44433  SR#: 8606492262
	   Enduser could potentially experience problems resulting
	   from improper URL parameter validation.

Defect Description: 
	PHSS_36871:

	1. Defect: JAGag44079  SR#: 8606491907
	   HP SMH was ignoring the target URL requested by HP SIM
	   during a Single-Task-Execution (STE) operation.

	2. Defect: JAGag44433  SR#: 8606492262
	   SMH was not properly validating parameters supplied as
	   part of the requested URL.

Enhancement: 
	No

SR: 
	8606491907 8606492262

Patch Files: 
	
	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_PA,
		v=HP:
	/opt/hpsmh/modules/mod_smh_aa.sl
	/opt/hpsmh/modules/mod_smh_config.sl
	/opt/hpsmh/data/ui/2.0/message.php.en
	/opt/hpsmh/data/ui/2.2/message.php.en
	/opt/hpsmh/data/ui/2.2/msg.php.en

	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_IA,
		v=HP:
	/opt/hpsmh/modules/mod_smh_aa.so
	/opt/hpsmh/modules/mod_smh_config.so
	/opt/hpsmh/data/ui/2.0/message.php.en
	/opt/hpsmh/data/ui/2.2/message.php.en
	/opt/hpsmh/data/ui/2.2/msg.php.en

what(1) Output: 
	
	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_PA,
		v=HP:
	/opt/hpsmh/data/ui/2.0/message.php.en:
		$Revision: message.php.en A.2.2.6.2 (11.11)PHSS_3686
			9/(11.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/data/ui/2.2/message.php.en:
		$Revision: message.php.en A.2.2.6.2 (11.11)PHSS_3686
			9/(11.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/data/ui/2.2/msg.php.en:
		$Revision: msg.php.en A.2.2.6.2 (11.11)PHSS_36869/(1
			1.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/modules/mod_smh_aa.sl:
		$Revision: mod_smh_aa A.2.2.6.2 11.31 PHSS_36871
	/opt/hpsmh/modules/mod_smh_config.sl:
		$Revision: mod_smh_config A.2.2.6.2 11.31 PHSS_36871

	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_IA,
		v=HP:
	/opt/hpsmh/data/ui/2.0/message.php.en:
		$Revision: message.php.en A.2.2.6.2 (11.11)PHSS_3686
			9/(11.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/data/ui/2.2/message.php.en:
		$Revision: message.php.en A.2.2.6.2 (11.11)PHSS_3686
			9/(11.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/data/ui/2.2/msg.php.en:
		$Revision: msg.php.en A.2.2.6.2 (11.11)PHSS_36869/(1
			1.23)PHSS_36870/(11.31)PHSS_36871
	/opt/hpsmh/modules/mod_smh_aa.so:
		$Revision: mod_smh_aa A.2.2.6.2 11.31 PHSS_36871
	/opt/hpsmh/modules/mod_smh_config.so:
		$Revision: mod_smh_config A.2.2.6.2 11.31 PHSS_36871

cksum(1) Output: 
	
	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_PA,
		v=HP:
	3115946131 118744 /opt/hpsmh/modules/mod_smh_aa.sl
	2329265372 131072 /opt/hpsmh/modules/mod_smh_config.sl
	1136090527 9018 /opt/hpsmh/data/ui/2.0/message.php.en
	1136090527 9018 /opt/hpsmh/data/ui/2.2/message.php.en
	3684644209 7385 /opt/hpsmh/data/ui/2.2/msg.php.en

	SysMgmtHomepage.SMH-RUN,fr=A.2.2.6.2,fa=HP-UX_B.11.31_IA,
		v=HP:
	2616219875 146592 /opt/hpsmh/modules/mod_smh_aa.so
	3173352888 160040 /opt/hpsmh/modules/mod_smh_config.so
	1136090527 9018 /opt/hpsmh/data/ui/2.0/message.php.en
	1136090527 9018 /opt/hpsmh/data/ui/2.2/message.php.en
	3684644209 7385 /opt/hpsmh/data/ui/2.2/msg.php.en

Patch Conflicts: None

Patch Dependencies: None

Hardware Dependencies: None

Other Dependencies: None

Supersedes: None

Equivalent Patches: 
	PHSS_36869:
	s700: 11.11
	s800: 11.11

	PHSS_36870:
	s700: 11.23
	s800: 11.23

Patch Package Size: 240 KBytes

Installation Instructions: 
	Please review all instructions and the Hewlett-Packard
	SupportLine User Guide or your Hewlett-Packard support terms
	and conditions for precautions, scope of license,
	restrictions, and, limitation of liability and warranties,
	before installing this patch.
	------------------------------------------------------------
	1. Back up your system before installing a patch.

	2. Login as root.

	3. Copy the patch to the /tmp directory.

	4. Move to the /tmp directory and unshar the patch:

		cd /tmp
		sh PHSS_36871

	5. Run swinstall to install the patch:

		swinstall -x autoreboot=true -x patch_match_target=true \
			  -s /tmp/PHSS_36871.depot

	By default swinstall will archive the original software in 
	/var/adm/sw/save/PHSS_36871.  If you do not wish to retain a
	copy of the original software, include the patch_save_files
	option in the swinstall command above:

		-x patch_save_files=false

	WARNING: If patch_save_files is false when a patch is installed,
		 the patch cannot be deinstalled.  Please be careful
		 when using this feature.

	For future reference, the contents of the PHSS_36871.text file is 
	available in the product readme:

		swlist -l product -a readme -d @ /tmp/PHSS_36871.depot

	To put this patch on a magnetic tape and install from the
	tape drive, use the command:

		dd if=/tmp/PHSS_36871.depot of=/dev/rmt/0m bs=2k

Special Installation Instructions: None

ページトップへ
セキュリティ報告&パッチダイジェスト翻訳版に戻る
プライバシー 本サイト利用時の合意事項 ウェブマスターに連絡
© 2008 Hewlett-Packard Development Company, L.P.