HP-UX IPCS Unspecified Buffer Overflow Vulnerability
BID:7626
Info
HP-UX IPCS Unspecified Buffer Overflow Vulnerability
| Bugtraq ID: | 7626 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 19 2003 12:00AM |
| Updated: | May 19 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Davide Del Vecchio. |
| Vulnerable: |
HP HP-UX 11.0 |
| Not Vulnerable: | |
Discussion
HP-UX IPCS Unspecified Buffer Overflow Vulnerability
The HP-UX ipcs utility is allegedly prone to a locally exploitable buffer overflow condition. This is likely due to insufficient bounds checking performed on user supplied data that is copied into an internal memory buffer. This utility may be installed setgid 'sys' on vulnerable systems and could be exploited to gain these privileges.
This issue was reported to affect ipcs on HP9000 Series 700/800 running HP-UX 11.00. Other versions are not affected.
The HP-UX ipcs utility is allegedly prone to a locally exploitable buffer overflow condition. This is likely due to insufficient bounds checking performed on user supplied data that is copied into an internal memory buffer. This utility may be installed setgid 'sys' on vulnerable systems and could be exploited to gain these privileges.
This issue was reported to affect ipcs on HP9000 Series 700/800 running HP-UX 11.00. Other versions are not affected.
Exploit / POC
HP-UX IPCS Unspecified Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
HP-UX IPCS Unspecified Buffer Overflow Vulnerability
Solution:
HP has released patch PHCO_29043. If the previously available depot (UNOF_29043.depot) was installed, it must be removed prior to the installation of PHCO_29043. Please see the revised HP advisory for further details.
HP HP-UX 11.0
Solution:
HP has released patch PHCO_29043. If the previously available depot (UNOF_29043.depot) was installed, it must be removed prior to the installation of PHCO_29043. Please see the revised HP advisory for further details.
HP HP-UX 11.0
-
HP PHCO_29043
http://itrc.hp.com
References
HP-UX IPCS Unspecified Buffer Overflow Vulnerability
References:
References:
- HP IT Resource Center (for Europe) (HP IT Resource Center)
- HP IT Resource Center (for US, Canada, Asia-Pacific, & Latin-America) (HP IT Resource Center)