HP-UX PHNE_44295 : s700_800 11.31 s700_800 cumulative PPP patch

s700800 11.31 s700800 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHNE_44296 : s700_800 11.23 cumulative PPP patch

s700800 11.23 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2008-1668

ftpd.c in 1 wu-ftpd 2.4.2 and 2 ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by ...

HP-UX PHSS_43690 : s700_800 11.31 X/Motif Runtime Patch

s700800 11.31 X/Motif Runtime Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHSS_44188 : s700_800 11.11 X/Motif Runtime Periodic Patch

s700800 11.11 X/Motif Runtime Periodic Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHKL_44278 : s700_800 11.31 vm cumulative patch

s700800 11.31 vm cumulative patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHSS_44149 : s700_800 11.23 X/Motif Runtime Patch

s700800 11.23 X/Motif Runtime Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHKL_44285 : s700_800 11.23 exec(2) cumulative patch

s700800 11.23 exec2 cumulative patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHKL_44305 : s700_800 11.11 exec(2) patch

s700800 11.11 exec2 patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable Network...

HP HP-UX execve system-call is vulnerable

HP HP-UX is a Unix-like operating system developed by Hewlett-Packard HP. A security vulnerability exists in the execve system-call implementation of HP HP-UX. A local attacker can exploit this vulnerability to gain privileges...

[security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04771027 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04771027 Version: 1 HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux,...

HP-UX privilege escalation

Privilege escalation via execve...

[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04735247 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04735247 Version: 1 HPSBUX03369 SSRT102037 rev.1 - HP-UX execve2, Local Elevation...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

Code injection

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2132

CVE-2015-2132 describes a local privilege-elevation vulnerability in HP-UX execve(2) across HP-UX B.11.11, B.11.23 and B.11.31. Root cause: vulnerable execve system-call implementation. Exploitation is local; HP released patches PHKL_44305 (11.11), PHKL_44285 (11.23) and PHKL_44278 (11.31) per HP...

CVE-2015-2126

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

Code injection

Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions...

CVE-2015-2126

HP-UX 11iv2/11iv3: the pppoec utility has a local privilege escalation via its setuid permissions. Attackers can gain root privileges through improper access permissions on /usr/bin/pppoec. HP’s workaround/patrol guidance (HP-UX HPSBUX03359) recommends removing the suid bit (chmod u-s /usr/bin/pp...