Lucene search

K
cve[email protected]CVE-2006-5558
HistoryOct 27, 2006 - 4:07 p.m.

CVE-2006-5558

2006-10-2716:07:00
web.nvd.nist.gov
14
cve-2006-5558
hp-ux
format string vulnerability
swask command
arbitrary code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.

Affected configurations

NVD
Node
hphp-uxMatch11.00
OR
hphp-uxMatch11.4
OR
hphp-uxMatch11.11
OR
hphp-uxMatch11.23ia64_64-bit

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

Related for CVE-2006-5558