yet another sym link followers

hi this time with HPUX 11.0 kmmodreg. kmmodreg creates two files in /tmp: /tmp/.kmmodreglock and /tmp/kmpath.tmp which cheerfully follows symlink to /dev/vg , /.rhosts and co. kmmodreg creates the files with OCREATE 666, or using the umask. since kmmodreg is running at boot, when umsak is 000, it...

CVE-2001-0248

Buffer overflow in FTP server in HPUX 11 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings...

CVE-2001-0248

HP-UX ftpd glob() Expansion STAT Buffer Overflow (CVE-2001-0248): The HP-UX 11 FTP server is affected by a buffer overflow triggered by the STAT command when a long pathname is expanded via glob(), allowing remote attackers to execute arbitrary commands. Affected component: HP-UX FTP daemon; root...

hp-ux.cu.overflow.txt

======================================================= HPUX cu -l option buffer overflow vulnerability ======================================================= Date: 02/11/2000 Tested on HP-UX B.11.00 $ ls -la which cu -r-sr-xr-x 1 bin 40960 9 avr 1998 /bin/cu Using '-l' with a long option string...

HPUX cu -l option buffer overflow vulnerabilit

======================================================= HPUX cu -l option buffer overflow vulnerability ======================================================= Date: 02/11/2000 Tested on HP-UX B.11.00 $ ls -la which cu -r-sr-xr-x 1 bin 40960 9 avr 1998 /bin/cu Using '-l' with a long option string...

hpux.ftpd.txt

Hello, I have discovered HPUX ftpd remote vulnerability. The problem persists in using vsprintf without format string. Example: 220 xxx FTP server Version 1.7.212.2 Tue Apr 21 12:14:46 GMT 1998 ready. user ftp 331 Guest login ok, send ident as password. pass %.1030d 230 Guest login ok, access...

Possible vulnerability in HPUX

Hello, Few days ago i read the mail Hackerslab bugpaper HP-UX bdf -t option buffer overflow vul. And decided to see any other possible vulnerabilityies on my ststem. HP-UX 10.20. After a few minutes maybe a little more : ,trying each setuid exe with different options, i finally got results as for...

HPUX FTPd vulnerability

Hello, I have discovered HPUX ftpd remote vulnerability. The problem persists in using vsprintf without format string. Example: 220 xxx FTP server Version 1.7.212.2 Tue Apr 21 12:14:46 GMT 1998 ready. user ftp 331 Guest login ok, send ident as password. pass .1030d 230 Guest login ok, access...

Дырка в snmpd под HPUX

Конфигурационный файл открыт на запись...

HP-UX 10.20/11.0 - '.SNMPD' File Permission

source: https://www.securityfocus.com/bid/1327/info A vulnerability exists in the snmpd included with HPUX 11, from Hewlett Packard. The configuration file for the snmpd is world writable. This could allow any user on the system to view and/or alter the settings of the snmp daemon. This in turn...

HP Security vulnerability in the man command

Systems Affected: HPUX 10.20 and 11.00 and probably other revs. Short Description: The 'man' command potentially allows attackers to overwrite any arbitrary file on the system via symlink bugs. I notified HP on 5-8-2000 and I've been told that a patch is forthcoming soon. No HP advisory has come...

HP-UX 10.20/11.0 - man '/tmp' Symlink

source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the system when root runs the 'man' comman...

CVE-1999-0961

HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...

CVE-1999-0961

HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...

CVE-1999-0684

Denial of service in Sendmail 8.8.6 in HPUX...

CVE-1999-0684

CVE-1999-0684 corresponds to a Denial of Service in Sendmail 8.8.6 running on HP-UX. Public references in the connected records confirm affected software is Sendmail 8.8.6 and note a DoS impact. A patch exists (HP PHNE_17190) addressing 8.8.6 on s700/s800 HP-UX 11.00, as cited by the Nessus plugi...

CVE-1999-0962

Affected software: HP-UX passwd command. Issue: a buffer overflow in the passwd utility allows local users to gain root privileges via a crafted command line option. This is a local privilege escalation; exploitation, affected versions, and specific root cause details are not provided in the supp...

CVE-1999-0962

Buffer overflow in HPUX passwd command allows local users to gain root privileges via a command line option...

CVE-1999-0688

Buffer overflows in HP Software Distributor SD for HPUX 10.x and 11.x...

CVE-1999-0688

CVE-1999-0688 applies to HP Software Distributor (SD) for HP-UX 10.x and 11.x, where buffer overflows are the underlying issue. The public records describe the vulnerability as a buffer overflow in SD, affecting HP-UX environments; the available references confirm the affected product, but do not...