HP Tru64 UNIX AdvFS 'showfile' Command Local Privilege Escalation Vulnerability

Bugtraq ID:	32160
Class:	Unknown
CVE:	CVE-2008-4414
Remote:	No
Local:	Yes
Published:	Nov 06 2008 12:00AM
Updated:	Nov 07 2008 09:55PM
Credit:	Ilja van Sprundel
Vulnerable:	HP Tru64 UNIX 5.1.0 B-4 HP Tru64 UNIX 5.1.0 B-3
Not Vulnerable:

HP Tru64 UNIX AdvFS 'showfile' Command Local Privilege Escalation Vulnerability

HP Tru64 UNIX is prone to a local privilege-escalation vulnerability affecting the AdvFS 'showfile' command.

Local attackers can exploit this issue to gain superuser privileges, completely compromising affected computers.

HP Tru64 UNIX v 5.1B-4 and v 5.1B-3 are affected.

HP Tru64 UNIX AdvFS 'showfile' Command Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Tru64 UNIX AdvFS 'showfile' Command Local Privilege Escalation Vulnerability

Solution:
The vendor has released fixes and an advisory. Please see the references for more information.


HP Tru64 UNIX 5.1.0 B-3

• HP patch details: T64KIT1001540-V51BB26-ES-20080916
  http://www11.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT10 01540-V51BB26-ES-20080916&admit=109447626+1226007917817+28353475

HP Tru64 UNIX 5.1.0 B-4

• HP patch details: T64KIT1001551-V51BB27-ES-20081015
  http://www11.itrc.hp.com/service/patch/patchDetail.do?patchid=T64KIT10 01551-V51BB27-ES-20081015&admit=109447626+1226007713405+28353475

HP Tru64 UNIX AdvFS 'showfile' Command Local Privilege Escalation Vulnerability

References:

• HP Homepage (HP)
  
• HP Tru64 Home Page (HP)
  
• [security bulletin] HPSBTU02383 SSRT080098 rev.1 - HP Tru64 UNIX running AdvFS " ([email protected])