HP-UX 10.20/11.0 - crontab '/tmp' File

source: https://www.securityfocus.com/bid/1845/info crontab is a binary in the cron package of the HP-UX cron implementation which allows a user to create a file of scheduled commands. A vulnerabiltiy in crontab exists that allows a user to read any file on an HP-UX system. crontab as implemented...

CVE-2000-0468

CVE-2000-0468 affects HP-UX 10.20 and 11, where a local attacker can overwrite files via a symbolic link attack. The entry indicates local access with low complexity and partial confidentiality/integrity/availability impact (CVSS v2 base 4.6). The connected documents corroborate the description b...

CVE-2000-0515

The CVE-2000-0515 issue affects HP-UX 11.0 where the snmpd.conf configuration file of the SNMP daemon (snmpd) is world-writable. This allows local users to modify SNMP configuration or gain privileges due to the insecure permissions on the config file (world-writable). The provided description do...

CVE-2000-0730

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

CVE-2000-0730

CVE-2000-0730 describes a vulnerability in the HP-UX 11.0 Affected software: HP-UX operating system (HP-UX 11.0) and its newgrp command. Issue: Local privilege escalation. The root cause is not detailed in the provided documents. Impact: Local users may gain privileges. Exploitation: Not provided...

CVE-2000-0515

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

CVE-2000-0468: Undefined Security Weakness

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

CVE-2000-0730: Undefined Security Weakness

Vulnerability in newgrp command in HP-UX 11.0 allows local users to gain privileges...

CVE-2000-0515: Undefined Security Weakness

The snmpd.conf configuration file for the SNMP daemon snmpd in HP-UX 11.0 is world writable, which allows local users to modify SNMP configuration or gain privileges...

CVE-2000-0755

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...

CVE-2000-0755

Vulnerability CVE-2000-0755 affects HP-UX 11.00 in the newgrp command, enabling local privilege escalation. The connected records confirm the affected product (HP-UX 11.00) and the vulnerable component (newgrp), with the impact described as local privilege gain. The exact root cause, exploitation...

CVE-2000-0801

Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option...

CVE-2000-0801

CVE-2000-0801 describes a buffer overflow in HP-UX 11.00’s bdf program that can be triggered by a long -t option, allowing local users to gain root privileges . The root cause is an overflow in the bdf implementation. The affected software is HP-UX 11.00 and the bdf utility; no remediation versio...

CVE-2000-0801: Undefined Security Weakness

Buffer overflow in bdf program in HP-UX 11.00 may allow local users to gain root privileges via a long -t option...

CVE-2000-0755: Undefined Security Weakness

Vulnerability in the newgrp command in HP-UX 11.00 allows local users to gain privileges...

[HackersLab bugpaper] HP-UX net.init rc script

============================================================================ ==== Hackerslab bugpaper HP-UX net.init rc script ============================================================================ ==== Testing : HP-UX 11.00 default HP-UX cleantmps rc script is disable. cat /etc/rc.config.d...

HP-UX 11.0 - net.init RC Script

HP-UX 11.0 - net.init RC Script source: https://www.securityfocus.com/bid/1602/info A vulnerability exists in HP-UX, from Hewlett Packard, under certain configurations. Version 11.0 is confirmed to have this problem; other versions may also be susceptible. If the CLEARTMP option in /etc/rc.config...

Дырка в HP-UX net.init

Инициализирующий скрипт некорректно работает с временными файлами, в результате любой файл можно испортить с помощью символьных линков...

HP-UX 11.0 - net.init RC Script

source: https://www.securityfocus.com/bid/1602/info A vulnerability exists in HP-UX, from Hewlett Packard, under certain configurations. Version 11.0 is confirmed to have this problem; other versions may also be susceptible. If the CLEARTMP option in /etc/rc.config.d is set to 1, meaning enabled,...