PT-2003-2406 · Hewlett Packard · Hp-Ux

Bt · Published 2003-12-31 · Updated 2017-10-11 · CVE-2003-1461

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP-UX version 11.0

Description A buffer overflow issue exists in the rwrite function, potentially allowing local users to execute arbitrary code by providing a long argument. The vendor was unable to reproduce the issue on a system patched for an lp vulnerability.

Recommendations For HP-UX version 11.0, apply the necessary patches to resolve the issue, specifically ensuring the system is updated to address the lp vulnerability, as this may also mitigate the rwrite buffer overflow issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2003-1461

Affected Products

Hp-Ux

References · 8

• 🔥 http://securityfocus.com/archive/1/320323 · Exploit
• 🔥 http://securityfocus.com/bid/7489 · Exploit
• 🔥 http://securityfocus.com/archive/1/320371 · Exploit
• 🔥 https://exploit-db.com/exploits/22561 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1461 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4897 · Note
• http://securityreason.com/securityalert/3283 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11919 · Note