PT-2003-2406 · Hewlett Packard · Hp-Ux

Bt · Publicado 2003-12-31 · Atualizado 2017-10-11 · CVE-2003-1461

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP-UX version 11.0

Description A buffer overflow issue exists in the rwrite function, potentially allowing local users to execute arbitrary code by providing a long argument. The vendor was unable to reproduce the issue on a system patched for an lp vulnerability.

Recommendations For HP-UX version 11.0, apply the necessary patches to resolve the issue, specifically ensuring the system is updated to address the lp vulnerability, as this may also mitigate the rwrite buffer overflow issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2003-1461

Produtos afetados

Hp-Ux

Referências · 8

• 🔥 http://securityfocus.com/archive/1/320323 · Exploit
• 🔥 http://securityfocus.com/bid/7489 · Exploit
• 🔥 http://securityfocus.com/archive/1/320371 · Exploit
• 🔥 https://exploit-db.com/exploits/22561 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4897 · Nota
• http://securityreason.com/securityalert/3283 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11919 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1461 · Nota de Segurança