HP-UX B11.11 - '/usr/bin/ct' Format String Privilege Escalation

/ File : xhp-ux11inlsct.c Usage : cc xhp-ux11inlsct.c -o xct ; ./xct Purpose : Get a local rootshell from /usr/bin/ct,using HP-UX location language format string bug. Author : watercloud xfocus org Tested : On HP-UX B11.11 . / include define PATH "PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

CVE-2003-0951

Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...

HP-UX dtmailpr buffer overflow

Buffer overflow on oversized DISPLAY variable...

CVE-2003-0089

Buffer overflow in HP-UX Software Distributor utilities (HP-UX B.11.00 and B.11.11) allows local users to execute arbitrary code via a long LANG environment variable passed to setuid programs such as swinstall and swmodify. Affected components include the Software Distributor utilities; the root ...

CVE-2003-0951

The CVE-2003-0951 entry concerns HP-UX B.11.23 Partition Manager (parmgr). The root cause is improper validation of certificates provided by the cimserver, enabling attackers to access sensitive data or elevate privileges. Affected component: parmgr within HP-UX; vulnerable aspect is certificate ...

CVE-2003-0089

Buffer overflow in the Software Distributor utilities for HP-UX B.11.00 and B.11.11 allows local users to execute arbitrary code via a long LANG environment variable to setuid programs such as 1 swinstall and 2 swmodify...

CVE-2003-0951

Partition Manager parmgr in HP-UX B.11.23 does not properly validate certificates that are provided by the cimserver, which allows attackers to obtain sensitive data or gain privileges...

CVE-2003-0840

Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable...

HP-UX libc format string bug

Format string bugs in nls functions...

HP-UX Software Distributor buffer overflow

Buffer overflow on LANG variable parsing...

NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...

NSFOCUS SA2003-08: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-08 Topic: HP-UX libc NLSPATH Environment Variable Privilege Elevation Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0090 http://www.nsfocus.com/english/homepage/research/0308.htm Affected system:...

NSFOCUS SA2003-07: HP-UX Software Distributor Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NSFOCUS Security AdvisorySA2003-07 Topic: HP-UX Software Distributor Buffer Overflow Vulnerability Release Date: 2003-11-13 CVE CAN ID: CAN-2003-0089 http://www.nsfocus.com/english/homepage/research/0307.htm Affected system: =================== - -...

CVE-2003-0840

The CVE-2003-0840 vulnerability is a local buffer overflow in dtprintinfo on HP-UX 11.00 (and potentially other OSes) that allows an unprivileged user to gain root privileges by supplying a long DISPLAY environment variable; exploitation details and affected software versions beyond HP-UX 11.00 a...

CVE-2003-0840

Buffer overflow in dtprintinfo on HP-UX 11.00, and possibly other operating systems, allows local users to gain root privileges via a long DISPLAY environment variable...

dtprintinfo.txt

======================================================= HPUX dtprintinfo buffer overflow vulnerability ======================================================= Davide Del Vecchio Adv7 Discovered in: 14/07/2003 Date: 08/10/2003 Tested on HP-UX B.11.00 Description: The Print Viewer program provides ...

HP-UX dtprintinfo buffer overflow

Buffer overflow on oversized DISPLAY variable...

HP-UX 11 CDE DTPrintInfo - Display Environment Variable Buffer Overflow

source: https://www.securityfocus.com/bid/8795/info It has been reported that dtprintinfo, installed setuid root by default, is susceptible to a locally exploitable buffer overflow vulnerability. The condition is triggered when the value of the DISPLAY environment variable is set to a string...

HP-UX "passwd" utility may corrupt password file

Overview The HP-UX "passwd" utility contains a denial-of-service vulnerability. Description The HP-UX "passwd" utility is used to make changes to a user's authentication credentials. A vulnerability in "passwd" may allow a local attacker to corrupt the password file. --- Impact An attacker may be...