HP-UX LibC TZ Environment Variable Local Buffer Overflow Vulnerability

Bugtraq ID:	20718
Class:	Boundary Condition Error
CVE:	CVE-2006-0436 CVE-2006-5556
Remote:	No
Local:	Yes
Published:	Oct 24 2006 12:00AM
Updated:	Jul 05 2016 09:38PM
Credit:	NCC Group reported this issue to the vendor.
Vulnerable:	HP HP-UX B.11.11 HP HP-UX B.11.04 HP HP-UX B.11.00
Not Vulnerable:

HP-UX LibC TZ Environment Variable Local Buffer Overflow Vulnerability

HP-UX is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with superuser privileges, completely compromising affected computers.

HP-UX LibC TZ Environment Variable Local Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/prdelka-vs-HPUX-libc.c

HP-UX LibC TZ Environment Variable Local Buffer Overflow Vulnerability

Solution:
HP has released an advisory along with fixes to address this issue. Please see the referenced advisory for information on obtaining and applying fixes.


HP HP-UX B.11.11

• HP PHCO_30402
  http://itrc.hp.com

HP HP-UX B.11.04

• HP PHCO_32280
  http://itrc.hp.com

HP HP-UX B.11.00

• HP PHCO_29249
  http://itrc.hp.com

HP-UX LibC TZ Environment Variable Local Buffer Overflow Vulnerability

References:

• /title: Permission denied (prdelka)
  
• HPSBUX02091 SSRT061099 rev.1 - HP-UX Local Increased Privilege (HP)
  
• Vendor Homepage (Hewlett-Packard )