PT-2001-2594 · Hewlett Packard · Hp-Ux

Published 2001-12-31 · Updated 2017-10-11 · CVE-2001-1509

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP-UX version 11.20

Description The issue concerns the geteuid function in Itanium Architecture (IA) on HP-UX, which fails to properly identify a user's effective user ID. This could potentially allow local users to gain privileges.

Recommendations For HP-UX version 11.20, consider applying a patch or fix provided by the vendor to correct the issue with the geteuid function.

Fix

Related Identifiers

CVE-2001-1509

Affected Products

Hp-Ux

References · 6

• http://securityfocus.com/bid/3452 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2001-1509 · Security Note
• http://securityfocus.com/advisories/3606 · Patch, Vendor Advisory
• http://hp.cso.uiuc.edu/ftp/pub/hp/patches/11.20/PHSS_25454 · Note
• http://iss.net/security_center/static/7324.php · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5364 · Note