PT-2003-1820 · Hewlett Packard · Hp Tru64 Unix

Published 2003-09-03 · Updated 2008-09-05 · CVE-2003-0724

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: HP Tru64 UNIX versions 5.1A through 5.1B

Description: The issue is related to the handling of RSA signatures in ssh when digital certificates and RSA keys are used. This could potentially allow local and remote attackers to gain privileges.

Recommendations: For HP Tru64 UNIX versions 5.1A through 5.1B, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2003-0724

Affected Products

Hp Tru64 Unix

References · 3

• http://securityfocus.com/bid/8492 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0724 · Security Note
• http://securityfocus.com/advisories/5736 · Vendor Advisory