Retired: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability

Bugtraq ID:	18098
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	May 24 2006 12:00AM
Updated:	Oct 25 2006 09:03PM
Credit:	NCC Group reported this issue to the vendor.
Vulnerable:	HP HP-UX B.11.22 HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00 Avaya Predictive Dialer 0
Not Vulnerable:

Retired: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability

HP-UX Software Distributor is susceptible to an unspecified local privilege-escalation vulnerability.

This issue allows local attackers to gain administrative privileges on affected computers. This facilitates the complete compromise of affected computers.

This BID is being retired and separated into the following individual records due to new information becoming available:

BID 20735 (HP-UX Software Distributor SWModify Local Buffer Overflow Vulnerability)

BID 20706 (HP-UX Software Distributor SWPackage Local Buffer Overflow Vulnerability)

BID 20726 (HP-UX Software Distributor SWAsk Local Format String Vulnerability)

Retired: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Retired: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability

Solution:
HP has released an advisory along with fixes to address this issue. Please see the referenced advisory for further information on obtaining and applying fixes.

Retired: HP-UX Software Distributor Unspecified Local Privilege Escalation Vulnerability

References:

• ASA-2006-106 - HP-UX Running Software Distributor Local Elevation of Privilege (Avaya)
  
• HP-UX Homepage (HP)
  
• HPSBUX02114 SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevatio (HP)