HP-UX Aries PA-RISC Emulator Unspecified Local Unauthorized Access Vulnerability

Bugtraq ID:	26383
Class:	Access Validation Error
CVE:	CVE-2007-5946
Remote:	No
Local:	Yes
Published:	Nov 08 2007 12:00AM
Updated:	Nov 20 2007 09:34PM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP HP-UX B.11.31 HP HP-UX B.11.23 HP Aries PA-RISC Emulator 11.31 HP Aries PA-RISC Emulator 11.23
Not Vulnerable:

HP-UX Aries PA-RISC Emulator Unspecified Local Unauthorized Access Vulnerability

HP-UX Aries PA-RISC emulator is prone to a local unauthorized-access vulnerability.

Few technical details regarding this issue are currently available. We will update this BID as more information emerges.

This issue affects HP-UX Aries PA-RISC emulator software running on HP-UX IA-64 platforms.

HP-UX Aries PA-RISC Emulator Unspecified Local Unauthorized Access Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

HP-UX Aries PA-RISC Emulator Unspecified Local Unauthorized Access Vulnerability

Solution:
The vendor has released fixes for this issue. Please see the referenced advisory for more information.


HP HP-UX B.11.31

• HP PHSS_36311
  IA-64 platform
  http://itrc.hp.com

HP HP-UX B.11.23

• HP PHSS_35528
  IA-64 platform
  http://itrc.hp.com

HP-UX Aries PA-RISC Emulator Unspecified Local Unauthorized Access Vulnerability

References:

• HP ARIES Dynamic Binary Translator rev.1 - HP-UX Running Aries PA Emulator (HP)
  
• Micro News Homepage (phptoys)
  
• Security Bulletin HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Em ([email protected])