HP-UX VVOS Unspecified Local Passwd Vulnerability
BID:5454
Info
HP-UX VVOS Unspecified Local Passwd Vulnerability
| Bugtraq ID: | 5454 |
| Class: | Unknown |
| CVE: |
CVE-2002-1406 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 13 2002 12:00AM |
| Updated: | Jul 11 2009 03:56PM |
| Credit: | Vulnerability announced in an HP Security Advisory. |
| Vulnerable: |
HP HP-UX (VVOS) 11.0 4 |
| Not Vulnerable: | |
Discussion
HP-UX VVOS Unspecified Local Passwd Vulnerability
Virtual Vault Operating System (VVOS) is a commercially-available operating system distributed by HP. It is designed to offer enhanced security features.
An unspecified vulnerability has been reported in VVOS. A vulnerability in the passwd program has been discovered, and a fix is available by HP.
Information concerning this vulnerability has not been made available. However, it's likely that this problem allows local privilege elevation on vulnerable systems, as passwd is a setuid root binary typically accessible only to users with shell-level access to a system. This could result in a local attacker gaining elevated access, and potentially administrative access.
Virtual Vault Operating System (VVOS) is a commercially-available operating system distributed by HP. It is designed to offer enhanced security features.
An unspecified vulnerability has been reported in VVOS. A vulnerability in the passwd program has been discovered, and a fix is available by HP.
Information concerning this vulnerability has not been made available. However, it's likely that this problem allows local privilege elevation on vulnerable systems, as passwd is a setuid root binary typically accessible only to users with shell-level access to a system. This could result in a local attacker gaining elevated access, and potentially administrative access.
Exploit / POC
HP-UX VVOS Unspecified Local Passwd Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP-UX VVOS Unspecified Local Passwd Vulnerability
Solution:
Fix available.
HP HP-UX (VVOS) 11.0 4
Solution:
Fix available.
HP HP-UX (VVOS) 11.0 4
-
HP PHCO_27373
http://itrc.hp.com
References
HP-UX VVOS Unspecified Local Passwd Vulnerability
References:
References: