HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability

Bugtraq ID:	15412
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Nov 13 2005 12:00AM
Updated:	May 26 2006 04:28PM
Credit:	This issue was announced by the vendor.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.00
Not Vulnerable:

HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability

HP-UX is prone to an unspecified vulnerability in xterm. Local attackers may be able to exploit this issue to gain some degree of unauthorized access.

The vendor has not provided any more information about the nature of the vulnerability. This BID will be updated if more information becomes available.

HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability

Solution:
HP has released revised versions of their advisory HPSBUX02075 (SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access) stating preliminary xterm files are available.

Please the revised advisories for more information.

HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability

References:

• HP-UX Homepage (HP)
  
• HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access (HP)