Lucene search
HistoryDec 15, 2011 - 3:57 a.m.
CVE-2011-4834
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.3%
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.
Affected configurations
Node
hpapplication_lifestyle_managementMatch11
hphp-ux
ORibmaix
ORsunsunos
Related
cve
cve
CVE-2011-4834
2011-12-15 03:57:35
cvelist
cvelist
CVE-2011-4834
2011-12-15 02:00:00
prion
prion
Design/Logic Flaw
2011-12-15 03:57:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
26.3%
Related for NVD:CVE-2011-4834