HP-UX System Administration Manager Local Privilege Escalation Vulnerability

Bugtraq ID:	50704
Class:	Unknown
CVE:	CVE-2011-4159
Remote:	No
Local:	Yes
Published:	Nov 17 2011 12:00AM
Updated:	Nov 17 2011 12:00AM
Credit:	HP
Vulnerable:	HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11
Not Vulnerable:

HP-UX System Administration Manager Local Privilege Escalation Vulnerability

HP-UX is prone to a local privilege-escalation vulnerability.

Attackers can leverage this issue to gain increased privileges. Successful exploits may compromise affected computers.

This issue affects the following versions of HP-UX running SAM:

HP-UX B.11.11
HP-UX B.11.23
HP-UX B.11.31

HP-UX System Administration Manager Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

HP-UX System Administration Manager Local Privilege Escalation Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

HP-UX System Administration Manager Local Privilege Escalation Vulnerability

References:

• HP Homepage (HP)
  
• HPSBUX02724 SSRT100650 rev.1 - HP-UX Running System Administration Manager (SAM) (HP)