PT-2001-2594 · Hewlett Packard · Hp-Ux

Publicado 2001-12-31 · Atualizado 2017-10-11 · CVE-2001-1509

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP-UX version 11.20

Description The issue concerns the geteuid function in Itanium Architecture (IA) on HP-UX, which fails to properly identify a user's effective user ID. This could potentially allow local users to gain privileges.

Recommendations For HP-UX version 11.20, consider applying a patch or fix provided by the vendor to correct the issue with the geteuid function.

Correção

Identificadores relacionados

CVE-2001-1509

Produtos afetados

Hp-Ux

Referências · 6

• http://securityfocus.com/advisories/3606 · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/3452 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2001-1509 · Nota de Segurança
• http://hp.cso.uiuc.edu/ftp/pub/hp/patches/11.20/PHSS_25454 · Nota
• http://iss.net/security_center/static/7324.php · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5364 · Nota