high7.2Public exploit code
CVE-2003-1097
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP-UX 10.x/11.x - RExec Remote 'Username' Flag Local Buffer Overrun2003-04-29 · dos · hp-ux · Verified
Impact
Buffer overflow in rexec on HP-UX B.10.20, B.11.00, and B.11.04, when setuid root, may allow local users to gain privileges via a long -l option.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp-Ux | Versions 10.10, 10.16, 10.20, 10.24, 10.26, 10.30 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-04/0374.html
- http://www.ciac.org/ciac/bulletins/n-088.shtml
- http://www.kb.cert.org/vuls/id/322540
- http://www.kb.cert.org/vuls/id/CRDY-5MJKM4
- http://www.securityfocus.com/bid/7459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11890
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5611
- http://archives.neohapsis.com/archives/bugtraq/2003-04/0374.html
- http://www.ciac.org/ciac/bulletins/n-088.shtml
- http://www.kb.cert.org/vuls/id/322540
- http://www.kb.cert.org/vuls/id/CRDY-5MJKM4
- http://www.securityfocus.com/bid/7459
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11890
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5611