medium4.6Public exploit code
CVE-2006-5556
Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute ar…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP-UX 11i - 'LIBC TZ' Enviroment Variable Privilege Escalation2006-10-24 · local · hp-ux · Verified
Impact
Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Hp-Ux | Versions 11.00, 11.4, 11.11 |
References
- NVD record
- CVE.org record
- http://blogs.23.nu/prdelka/stories/13144/
- http://www.securityfocus.com/bid/20718
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29777
- https://www.exploit-db.com/exploits/2636
- http://blogs.23.nu/prdelka/stories/13144/
- http://www.securityfocus.com/bid/20718
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29777
- https://www.exploit-db.com/exploits/2636