Lucene search

MitreCVE-2006-5556

HistoryOct 27, 2006 - 4:07 p.m.

CVE-2006-5556

2006-10-2716:07:00

mitre

web.nvd.nist.gov

cve-2006-5556

buffer overflow

localtime_r function

libc

hp-ux

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

Percentile

0.4%

JSON

Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.

Affected configurations

Nvd

Node

hphp-uxMatch11.00

hphp-uxMatch11.4

hphp-uxMatch11.11

VendorProductVersionCPE
hphp-ux11.00cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
hphp-ux11.4cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*
hphp-ux11.11cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	hp-ux	11.00	cpe:2.3:o:hp:hp-ux:11.00:::::::*
hp	hp-ux	11.4	cpe:2.3:o:hp:hp-ux:11.4:::::::*
hp	hp-ux	11.11	cpe:2.3:o:hp:hp-ux:11.11:::::::*

References

blogs.23.nu/prdelka/stories/13144/

www.securityfocus.com/bid/20718

exchange.xforce.ibmcloud.com/vulnerabilities/29777

www.exploit-db.com/exploits/2636

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2006-5556