HP-UX Directory Server Password Disclosure Vulnerabilities

Multiple vulnerabilities have been identified in HP-UX Directory Server, which can be exploited by remote authenticated user or  local user to view passwords.

1. A local user can access the plaintext password in certain cases.
2. A remote authenticated user can view the password for a target LDAP user when audit logging is enabled by reading the audit log.