[security bulletin] HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02288473 Version: 1 HPSBUX02556 SSRT100014 rev.1 - HP-UX Running rpc.ttdbserver, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon ...

CVE-2010-0083

CVE-2010-0083 maps to a Solaris/OpenSolaris vulnerability in the ToolTalk rpc.ttdbserverd database parser, enabling remote exploitation via crafted .rec files. The HP advisory notes remote code execution by disabling rpc.ttdbserver (inetd.config entry), and the PacketsStorm PoCs show SPARC/x86 ex...