HPUX PCLToTIFF Denial of Service Vulnerability
BID:2646
Info
HPUX PCLToTIFF Denial of Service Vulnerability
| Bugtraq ID: | 2646 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 24 2001 12:00AM |
| Updated: | Apr 24 2001 12:00AM |
| Credit: | This vulnerability was announced to Bugtraq in a HP Security Advisory on April 24, 2001. |
| Vulnerable: |
HP HP-UX 10.26 HP HP-UX 10.20 HP HP-UX 10.10 HP HP-UX 10.0 1 |
| Not Vulnerable: | |
Discussion
HPUX PCLToTIFF Denial of Service Vulnerability
HP-UX is the UNIX Variant Operating System distributed by Hewlett Packard. HP-UX is designed for operation on systems ranging from desktop servers to large enterprise systems.
A problem in the software could allow a local user to deny service to the system. The program pcltotiff included with HP-UX revisions contains a flaw that could be exploited by a local user to deny access to legitimate users of the system. In a default installation of HP-UX, pcltotiff is installed SGID bin. Details on the nature of the vulnerability are currently unavailable.
This problem makes it possible for a user with local access to deny service to legitimate users of the system.
HP-UX is the UNIX Variant Operating System distributed by Hewlett Packard. HP-UX is designed for operation on systems ranging from desktop servers to large enterprise systems.
A problem in the software could allow a local user to deny service to the system. The program pcltotiff included with HP-UX revisions contains a flaw that could be exploited by a local user to deny access to legitimate users of the system. In a default installation of HP-UX, pcltotiff is installed SGID bin. Details on the nature of the vulnerability are currently unavailable.
This problem makes it possible for a user with local access to deny service to legitimate users of the system.
Exploit / POC
HPUX PCLToTIFF Denial of Service Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.