Lucene search
HistoryDec 15, 2011 - 3:57 a.m.
CVE-2011-4834
cve-2011-4834
hp alm
configuration tool
local privilege escalation
aix
hp-ux
solaris
security vulnerability
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.2%
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.
Affected configurations
Node
hpapplication_lifestyle_managementMatch11
hphp-ux
ORibmaix
ORsunsunos
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:application_lifestyle_management | hp application lifestyle management | eq | 11 |
Related
cvelist
cvelist
CVE-2011-4834
2011-12-15 02:00:00
prion
prion
Design/Logic Flaw
2011-12-15 03:57:00
nvd
nvd
CVE-2011-4834
2011-12-15 03:57:35
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
26.2%
Related for CVE-2011-4834