PT-2007-2249 · Hewlett Packard · Hp Tru64 Unix

Published 2007-02-07 · Updated 2018-10-16 · CVE-2007-0805

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP Tru64 UNIX version 5.1 1885

Description The issue allows local users to obtain sensitive information, including environment variables of arbitrary processes, via the "auxewww" argument of the ps (/usr/ucb/ps) command. This is similar to a previously known issue.

Recommendations For HP Tru64 UNIX version 5.1 1885, consider restricting access to the ps command or limiting the use of the "auxewww" argument to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2007-0805

Affected Products

Hp Tru64 Unix

References · 15

• 🔥 https://exploit-db.com/exploits/3273 · Exploit
• 🔥 http://rawlab.mindcreations.com/codes/exp/nix/osf1tru64ps.ksh · Exploit
• http://secunia.com/advisories/24041 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00817515 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0805 · Security Note
• http://secunia.com/advisories/25135 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32276 · Note
• http://securityfocus.com/archive/1/459266/100/0/threaded · Note
• http://securitytracker.com/id?1018005 · Note
• http://osvdb.org/33113 · Note
• http://securitytracker.com/id?1017592 · Note
• http://securityfocus.com/archive/1/459593/100/200/threaded · Note
• http://vupen.com/english/advisories/2007/1654 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052227.html · Note
• http://securityfocus.com/archive/1/459275/100/0/threaded · Note