HP-UX LPAdmin Unspecified Buffer Overflow Vulnerability
BID:5582
Info
HP-UX LPAdmin Unspecified Buffer Overflow Vulnerability
| Bugtraq ID: | 5582 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 28 2002 12:00AM |
| Updated: | Aug 28 2002 12:00AM |
| Credit: | Vulnerability announced by HP. |
| Vulnerable: |
HP HP-UX 11.11 HP HP-UX 11.0 HP HP-UX 10.20 |
| Not Vulnerable: | |
Discussion
HP-UX LPAdmin Unspecified Buffer Overflow Vulnerability
HP-UX is the Unix Operating System variant distributed and maintained by HP.
HP has announced that an unspecified buffer overflow exists in HP-UX. The problem is reported as a core dump that occurs under certain conditions. As lpadmin is typically installed with setuid privileges, it could be possible for a local attacker to exploit this vulnerability to execute arbitrary instructions with elevated privileges.
HP-UX is the Unix Operating System variant distributed and maintained by HP.
HP has announced that an unspecified buffer overflow exists in HP-UX. The problem is reported as a core dump that occurs under certain conditions. As lpadmin is typically installed with setuid privileges, it could be possible for a local attacker to exploit this vulnerability to execute arbitrary instructions with elevated privileges.