HP-UX 11.00/10.20 crontab Overwrite Files Exploit

Exploit for hp-ux platform in category dos / poc ================================================= HP-UX 11.00/10.20 crontab Overwrite Files Exploit ================================================= !/bin/sh HP-UX 11.00/10.20 crontab Kyong-won,Cho email protected Usage : ./crontab.sh if -z "$1"...

HP-UX 10.20 resource monitor service

Problem: on HP-UX 10.20 you can change any file on the root partition to mode 644: $ uname -sr HP-UX B.10.20 $ cd /etc/opt/resmon/log $ mv registrar.log registrar.log.orig $ ls -l /.shhistory -rw------- 1 root sys 3316 Sep 20 15:22 /.shhistory $ ln /.shhistory registrar.log $ nc hpux.example.com...

CVE-1999-0423

CVE-1999-0423 concerns the hpterm component on HP-UX 10.20, where a vulnerability allows local users to gain additional privileges. The linked Red Hat, EUVD, CVE, and NVD records all reiterate the HP-UX hpterm impact without revealing a specific exploit method, affected files, or exact root cause...

hp-ux.hpterm.txt

Date: Thu, 18 Mar 1999 12:36:13 -0800 From: [email protected] Reply-To: [email protected] To: [email protected] Subject: Security Bulletins Digest HP Support Information Digests =============================================================================== o HP...

CVE-1999-1249

movemail in HP-UX 10.20 has insecure permissions, which allows local users to gain privileges...

PT-1997-1214 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX version 10.20 Description: The issue is related to insecure permissions in the movemail component, which can be exploited by local users to gain privileges. Recommendations: For HP-UX version 10.20, adjust the permissions of the movemai...