FYI…

HP Web Jetadmin vuln - v10.2 SR5 released
- http://secunia.com/advisories/43526/
Release Date: 2011-02-28
Impact: Security Bypass
Where: Local system
Solution Status: Vendor Patch
… The vulnerability is reported in versions 10.2 SR3 and SR4.
Solution: Update to version 10.2 Service Release 5 or later.
Original Advisory: HPSBPI02635 SSRT100391:
http://h20000.www2.hp.com/bizsupport/TechS…ectID=c02714670

- http://h20000.www2.hp.com/bizsupport/TechS…ID=c01675453#A0

- http://www.securitytracker.com/id/1025130
Feb 26 2011
Version(s): 10.2 SR3 and SR4
Description: … A local user can gain unauthorized access to resources managed by Web Jetadmin.
Solution: The vendor has issued a fix (10.2 SR5).

- https://h20392.www2.hp.com/portal/swdepot/d…tNumber=J6052AA

:ph34r: