PT-2007-2249 · Hewlett Packard · Hp Tru64 Unix

Publicado 2007-02-07 · Atualizado 2018-10-16 · CVE-2007-0805

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP Tru64 UNIX version 5.1 1885

Description The issue allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument of the ps (/usr/ucb/ps) command. This is similar to a previously known issue.

Recommendations For HP Tru64 UNIX version 5.1 1885, consider restricting access to the ps command or limiting the use of the "auxewww" argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2007-0805

Produtos afetados

Hp Tru64 Unix

Referências · 15

• 🔥 https://exploit-db.com/exploits/3273 · Exploit
• 🔥 http://rawlab.mindcreations.com/codes/exp/nix/osf1tru64ps.ksh · Exploit
• http://secunia.com/advisories/25135 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32276 · Nota
• http://secunia.com/advisories/24041 · Aviso do Fabricante
• http://securityfocus.com/archive/1/459266/100/0/threaded · Nota
• http://securitytracker.com/id?1018005 · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00817515 · Aviso do Fabricante
• http://osvdb.org/33113 · Nota
• http://securitytracker.com/id?1017592 · Nota
• http://securityfocus.com/archive/1/459593/100/200/threaded · Nota
• http://vupen.com/english/advisories/2007/1654 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052227.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0805 · Nota de Segurança
• http://securityfocus.com/archive/1/459275/100/0/threaded · Nota