HP-UX SLSd unauthorized access

It's possible to create any file with attacker-supplied data...

HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00862809 Version: 1 HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation NOTICE: The information in this Security Bulletin should be acted upon as soon a...

CVE-2007-0915

Distributed SLS daemon SLSd on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request...

CVE-2007-0915

CVE-2007-0915 affects the HP-UX SLSd service (Distributed SLS daemon) on HP-UX B.11.11. The vulnerability allows remote attackers to overwrite arbitrary files and gain privileges by sending a crafted RPC request. The NVD entry lists a high impact with CVSS v2 base score 10.0 (AV:N/AC:L/Au:N/C:C/I...