PT-2003-2054 · Hewlett Packard · Hp-Ux

Published 2003-12-31 · Updated 2017-10-11 · CVE-2003-1099

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.00, B.11.04, B.11.11

Description The issue allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack, as temporary files are created with predictable names in /tmp.

Recommendations For HP-UX versions B.11.00, B.11.04, B.11.11, consider restricting access to the /tmp directory to minimize the risk of exploitation. As a temporary workaround, avoid using the shar command until a patch is available. Restrict access to the affected system to prevent local users from exploiting the issue.

Fix

Related Identifiers

CVE-2003-1099

Affected Products

Hp-Ux

References · 8

• http://ciac.org/ciac/bulletins/o-032.shtml · Patch
• http://secunia.com/advisories/10339 · Patch
• http://securityfocus.com/bid/9141 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2003-1099 · Security Note
• http://kb.cert.org/vuls/id/CRDY-5VFQA3 · Patch, Vendor Advisory
• http://kb.cert.org/vuls/id/509454 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13882 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5788 · Note