HP-UX PHKL_44285 : s700_800 11.23 exec(2) cumulative patch

s700800 11.23 exec2 cumulative patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHKL_44305 : s700_800 11.11 exec(2) patch

s700800 11.11 exec2 patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable Network...

HP HP-UX execve system-call is vulnerable

HP HP-UX is a Unix-like operating system developed by Hewlett-Packard HP. A security vulnerability exists in the execve system-call implementation of HP HP-UX. A local attacker can exploit this vulnerability to gain privileges...

[security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04771027 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04771027 Version: 1 HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux,...

[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04735247 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04735247 Version: 1 HPSBUX03369 SSRT102037 rev.1 - HP-UX execve2, Local Elevation...

HP-UX privilege escalation

Privilege escalation via execve...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2132

CVE-2015-2132 describes a local privilege-elevation vulnerability in HP-UX execve(2) across HP-UX B.11.11, B.11.23 and B.11.31. Root cause: vulnerable execve system-call implementation. Exploitation is local; HP released patches PHKL_44305 (11.11), PHKL_44285 (11.23) and PHKL_44278 (11.31) per HP...

CVE-2015-2132: Undefined Security Weakness

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

PT-2015-2785

Name of the Vulnerable Software and Affected Versions HP-UX versions B.11.11 through B.11.31 Description The issue is related to an unspecified vulnerability in the execve system-call implementation. It allows local users to gain privileges via unknown vectors. The vulnerability is also described...

Code injection

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

CVE-2015-2126

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

CVE-2015-2126

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

CVE-2015-2126

HP-UX 11iv2/11iv3: the pppoec utility has a local privilege escalation via its setuid permissions. Attackers can gain root privileges through improper access permissions on /usr/bin/pppoec. HP’s workaround/patrol guidance (HP-UX HPSBUX03359) recommends removing the suid bit (chmod u-s /usr/bin/pp...

PT-2015-2784

Name of the Vulnerable Software and Affected Versions HP-UX versions 11iv2 through 11iv3 Description The issue is related to insufficient access control in the pppoec component, allowing local users to exploit it and gain privileges. This is due to the setuid permissions and weaknesses in access...

CVE-2015-2126: Undefined Security Weakness

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

HP-UX privilege escalation

pppoec privilege escalation...

[security bulletin] HPSBUX03359 rev.1 - HP-UX pppoec, local elevation of privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04718530 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04718530 Version: 1 HPSBUX03359 rev....