HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
BID:30666
Info
HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
| Bugtraq ID: | 30666 |
| Class: | Access Validation Error |
| CVE: |
CVE-2008-1668 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 12 2008 12:00AM |
| Updated: | Aug 28 2008 04:04PM |
| Credit: | Reported by the vendor |
| Vulnerable: |
HP HP-UX B.11.11 |
| Not Vulnerable: | |
Discussion
HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
HP-UX running 'ftpd' is prone to a remote privilege-escalation vulnerability.
Remote attackers can exploit this issue to gain elevated privileges on the affected computer.
HP-UX running 'ftpd' is prone to a remote privilege-escalation vulnerability.
Remote attackers can exploit this issue to gain elevated privileges on the affected computer.
Exploit / POC
HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
References
HP-UX 'ftpd' Remote Privilege Escalation Vulnerability
References:
References: