HP-UX B11.11 /usr/bin/ct Local Format String Root Exploit

No description provided by source. / File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / includestdio.h define PATH...

HP-UX 11.0 /bin/cu Privilege Escalation Exploit

No description provided by source. / Copyright c 2001 Zorgon All Rights Reserved The copyright notice above does not evidence any actual or intended publication of such source code. HP-UX /bin/cu exploit. Tested on HP-UX 11.00 [email protected] http://www.nightbird.free.fr / include stdio.h...

CVE-2006-5556

Buffer overflow in the localtimer function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable...

CVE-2006-5557

Stack-based buffer overflow in the 1 swpackage and 2 swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be...

CVE-2006-5558

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to ...

CVE-2006-5557

Stack-based buffer overflow in the 1 swpackage and 2 swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be...

CVE-2006-5556

Buffer overflow in the localtimer function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable...

CVE-2006-5558

Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to ...

CVE-2006-5556

CVE-2006-5556 describes a buffer overflow in the libc localtime_r function (and certain other functions) affecting HP-UX B.11.11 and possibly other versions. The vulnerability allows local users to execute arbitrary code by supplying a long TZ environment variable. The available documents confirm...

CVE-2006-5558

CVE-2006-5558: HP-UX B.11.11 (and possibly other versions) is affected by a format string vulnerability in the swask command, allowing a local user to execute arbitrary code via format string specifiers in the -s argument. The vulnerability description notes it may be a duplicate of CVE-2006-2574...

CVE-2006-5557

Technical details about CVE-2006-5557 (affected product/version, root cause, exploitability, or remediation) are not publicly available in the provided documents; no concrete technical details are present beyond the NVD description. Monitor for updates.

IBM多个产品未明信任书伪造漏洞

IBM包含多系列产品，如IBM Tivoli，IBM WebSphere等。 IBM多个产品存在信任书伪造问题，远程攻击者可以利用这个漏洞访问资源和数据或可能控制应用程序。 目前报告此问题可以使攻击者利用COOKIE或伪造其他信任用户未授权访问资源，目前没有详细漏洞细节提供。 IBM Tivoli Access Manager for e-business 5.1 IBM Tivoli Access Manager for e-business 4.1 IBM Tivoli Access Manager for e-business 3.9 IBM Tivoli Access Manag...

HP-UX Software Distributor swpackage命令行参数本地栈溢出漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的swpackage在处理“-S”可选命令行参数时存在栈溢出漏洞，本地攻击者可能利用此漏洞获得系统的root用户入侵。 HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02114）以及相应补丁: HPSBUX02114：SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege...

HP-UX LIBC TZ环境变量本地溢出漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 HP-UX的LIBC实现在处理TZ环境变量时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升权限。 由于没有在localtimer及相关函数中执行充分的边界检查，HP-UX的libc库在处理TZ环境变量时存在栈溢出漏洞。任何使用timezone函数的suid或sgid程序都受这个漏洞影响。成功攻击可能导致权限提升。 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02091）以及相应补丁: HPSBUX02091：SSRT061099 rev...

HP-UX 11i (swpackage) Stack Overflow Local Root Exploit

No description provided by source. / HP-UX swpackage buffer overflow exploit ======================================= HP-UX 'swpackage' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...

HP-UX 11i (swmodify) Stack Overflow Local Root Exploit

No description provided by source. / HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S"...

HP-UX 11i (LIBC TZ enviroment variable) Local Root Exploit

No description provided by source. / HP-UX libc timezone environment overflow exploit ================================================ HP-UX libc contains an exploitable stack overflow in the handling of "TZ" environment variable. The problem occurs due to insufficient bounds checking in the...

HP DTMail附件参数缓冲区溢出漏洞

HP DTMail是在桌面上使用的邮件客户端。 DTMail在处理-a选项参数时存在缓冲区溢出漏洞，本地攻击者可以利用此漏洞获得root用户权限。 以下gdb输出显示了这个漏洞： gdb r -a -a perl -e 'print "A" x 9000' Starting program: /cluster/members/member0/tmp/dtmail -a perl -e 'print "A"x 9000' no debugging symbols found...no debugging symbols found... no debugging symbols...

HP-UX 11i (swask) Format String Local Root Exploit

No description provided by source. / HP-UX swask format string local root exploit ============================================ HP-UX 'swask' contains an exploitable format string vulnerability. The 'swask' utility is installed setuid root by default. Specifically the vulnerability is in the...

HP-UX PHSS_35435 : HP-UX Running dtmail, Local Execution of Arbitrary Code (HPSBUX02162 SSRT061223 rev.1)

s700800 11.23 CDE Applications Patch : A potential security vulnerability has been identified with HP-UX running dtmail. The vulnerability could be exploited by a local, authorized user to execute arbitrary code as a member of the 'mail' group. References: NETRAGARD-20060810. %NASLMINLEVEL 70300 ...