HP-UX VVOS TGAD Unspecified Stack Corruption Vulnerability

Bugtraq ID:	5459
Class:	Unknown
CVE:	CVE-2002-1439
Remote:	No
Local:	No
Published:	Aug 14 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Vulnerability announced in an HP Security Advisory.
Vulnerable:	HP VirtualVault 4.6 - HP HP-UX 11.0 4 HP VirtualVault 4.5 - HP HP-UX 11.0 4 HP VirtualVault 4.0 + HP HP-UX 11.0 4 + HP HP-UX (VVOS) 11.0 4 + Sun iPlanet Web Server 4.0 HP HP-UX (VVOS) 11.0 4
Not Vulnerable:

HP-UX VVOS TGAD Unspecified Stack Corruption Vulnerability

Virtual Vault Operating System (VVOS) is a commercially-available operating system distributed by HP. It is designed to offer enhanced security features.

The TGA Daemon in VVOS is vulnerable to an unspecified stack corruption vulnerability.

Information concerning this vulnerability has not been made available. However, it's likely that this problem allows local privilege elevation on vulnerable systems. This could result in a local attacker gaining elevated access, and potentially administrative access.

HP-UX VVOS TGAD Unspecified Stack Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

HP-UX VVOS TGAD Unspecified Stack Corruption Vulnerability

Solution:
HP has provided a fix for this issue:


HP VirtualVault 4.0

• HP PHSS_27499
  http://itrc.hp.com

HP VirtualVault 4.5

• HP PHSS_27500
  http://itrc.hp.com

HP VirtualVault 4.6

• HP PHSS_27501
  http://itrc.hp.com

HP-UX VVOS TGAD Unspecified Stack Corruption Vulnerability

References: