ZDI-07-060: HP OpenView Radia Integration Server File System Exposure
From: [email protected]
To: [email protected], [email protected]
Subject: ZDI-07-060: HP OpenView Radia Integration Server File System Exposure
Vulnerability
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 7.0.2 December 03, 2006
Message-ID: <OF4CDEFBF8.6D6F14E3-ON88257385.007243CC-86257385.007FA0C6@3com.com.>
Sender: [email protected]
Date: Wed, 31 Oct 2007 18:14:03 -0500
X-MIMETrack: Serialize by Router on USUT001/US/3Com(Release 6.5.5FP2|October 23, 2006) at
10/31/2007 04:14:07 PM,
Serialize complete at 10/31/2007 04:14:07 PM
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: base64
X-Virus-Scanned: antivirus-gw at tyumen.ru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