PT-2003-2054 · Hewlett Packard · Hp-Ux

Publicado 2003-12-31 · Atualizado 2017-10-11 · CVE-2003-1099

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.00, B.11.04, B.11.11

Description The issue allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack, as temporary files are created with predictable names in /tmp.

Recommendations For HP-UX versions B.11.00, B.11.04, B.11.11, consider restricting access to the /tmp directory to minimize the risk of exploitation. As a temporary workaround, avoid using the shar command until a patch is available. Restrict access to the affected system to prevent local users from exploiting the issue.

Correção

Identificadores relacionados

CVE-2003-1099

Produtos afetados

Hp-Ux

Referências · 8

• http://kb.cert.org/vuls/id/CRDY-5VFQA3 · Correção, Aviso do Fabricante
• http://kb.cert.org/vuls/id/509454 · Nota
• http://ciac.org/ciac/bulletins/o-032.shtml · Correção
• http://secunia.com/advisories/10339 · Correção
• http://securityfocus.com/bid/9141 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2003-1099 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13882 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5788 · Nota