HP-UX ftpd glob() Expansion STAT Buffer Overflow Vulnerability
BID:2552
Info
HP-UX ftpd glob() Expansion STAT Buffer Overflow Vulnerability
| Bugtraq ID: | 2552 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2001-0248 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2001 12:00AM |
| Updated: | Jul 11 2009 06:06AM |
| Credit: | This vulnerability was discovered by Anthony Osborne and John McDonald of NAI's COVERT labs and published on April 9, 2001. |
| Vulnerable: |
HP HP-UX (VVOS) 11.0.4 HP HP-UX (VVOS) 10.24 HP HP-UX 11.0 HP HP-UX 10.30 HP HP-UX 10.20 HP HP-UX 10.10 HP HP-UX 10.0 1 HP HP-UX 10.0 |
| Not Vulnerable: | |
Exploit / POC
HP-UX ftpd glob() Expansion STAT Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP-UX ftpd glob() Expansion STAT Buffer Overflow Vulnerability
Solution:
HP has released fixes and an advisory.
HP HP-UX 10.0 1
HP HP-UX 10.10
HP HP-UX 10.20
HP HP-UX (VVOS) 10.24
HP HP-UX 11.0
HP HP-UX (VVOS) 11.0.4
Solution:
HP has released fixes and an advisory.
HP HP-UX 10.0 1
-
HP PHNE_23947
http://itrc.hp.com
HP HP-UX 10.10
-
HP PHNE_23947
http://itrc.hp.com
HP HP-UX 10.20
-
HP PHNE_23948
http://itrc.hp.com
HP HP-UX (VVOS) 10.24
HP HP-UX 11.0
-
HP PHNE_23949
http://itrc.hp.com
HP HP-UX (VVOS) 11.0.4