HP-UX Passwd Unspecified Local Denial of Service Vulnerability

Bugtraq ID:	17280
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-1509
Remote:	No
Local:	Yes
Published:	Mar 28 2006 12:00AM
Updated:	Jun 27 2007 08:28PM
Credit:	Reported by the vendor.
Vulnerable:	HP HP-UX B.11.23 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00
Not Vulnerable:

HP-UX Passwd Unspecified Local Denial of Service Vulnerability

HP-UX passwd(1) is prone to an unspecified local denial-of-service vulnerability.

This issue arises because the software fails to handle exceptional conditions in a proper manner.

Due to a lack of details, further information cannot be provided at the moment. This BID will be updated when more information becomes available.

HP-UX Passwd Unspecified Local Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

HP-UX Passwd Unspecified Local Denial of Service Vulnerability

Solution:
HP advisory HPSBUX02103 (SSRT5953 rev.3 - HP-UX passwd(1) Local Denial of Service (DoS)) is available to address this issue. Please see the references for more information.

HP-UX Passwd Unspecified Local Denial of Service Vulnerability

References:

• HP-UX Homepage (HP)