PT-2004-3583 · Gtk++2 · Gtk++3

Published 2004-12-31 · Updated 2017-10-11 · CVE-2004-2693

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed

Description The issue concerns insecure directory permissions in HP-UX, which can be exploited by local users to gain privileges. This is achieved through files located in the /opt/gnome/src/GLib/ directory.

Recommendations For HP-UX versions B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed, consider changing the directory permissions of /opt/gnome/src/GLib/ to secure them and prevent local users from gaining privileges.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2004-2693

HPSBUX01034

Affected Products

B6848Ab Gtk+ Support Libraries

Glib

Gtk+

Hp-Ux

References · 8

• http://marc.info/?l=bugtraq&m=108455531606056&w=2 · Vendor Advisory
• http://secunia.com/advisories/11615 · Vendor Advisory
• http://hp.com/products1/unix/java/mozilla/HPSBUX01034.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-2693 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2004-2693 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6105 · Note
• http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/action.process/public/kb/docDisplay/?javax.portlet.action=true&spf_p.tpst=kbDocDisplay&javax.portlet.begCacheTok=com.vignette.cachetoken&spf_p.prp_kbDocDisplay=wsrp-interactionState%3DdocId%253DZW1yX25hLWMwMDk1NzcyMw%2525253D%2525253DhPsCeNc%257CdocLocale%253Den_US%257CcalledBy%253D&javax.portlet.endCacheTok=com.vignette.cachetoken · Note
• http://osvdb.org/6120 · Note