shar on HP-UX B.11.00, B.11.04, and B.11.11 creates temporary files with predictable names in /tmp, which allows local users to cause a denial of service and possibly execute arbitrary code via a symlink attack.
References
Link | Resource |
---|---|
http://secunia.com/advisories/10339 | Patch |
http://www.ciac.org/ciac/bulletins/o-032.shtml | Patch |
http://www.kb.cert.org/vuls/id/509454 | Third Party Advisory US Government Resource |
http://www.kb.cert.org/vuls/id/CRDY-5VFQA3 | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/9141 | Patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/13882 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5788 | |
http://secunia.com/advisories/10339 | Patch |
http://www.ciac.org/ciac/bulletins/o-032.shtml | Patch |
http://www.kb.cert.org/vuls/id/509454 | Third Party Advisory US Government Resource |
http://www.kb.cert.org/vuls/id/CRDY-5VFQA3 | Patch Third Party Advisory US Government Resource |
http://www.securityfocus.com/bid/9141 | Patch |
https://exchange.xforce.ibmcloud.com/vulnerabilities/13882 | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5788 |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:46
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/10339 - Patch | |
References | () http://www.ciac.org/ciac/bulletins/o-032.shtml - Patch | |
References | () http://www.kb.cert.org/vuls/id/509454 - Third Party Advisory, US Government Resource | |
References | () http://www.kb.cert.org/vuls/id/CRDY-5VFQA3 - Patch, Third Party Advisory, US Government Resource | |
References | () http://www.securityfocus.com/bid/9141 - Patch | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/13882 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5788 - |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:46
NVD link : CVE-2003-1099
Mitre link : CVE-2003-1099
CVE.ORG link : CVE-2003-1099
JSON object : View
Products Affected
hp
- hp-ux
CWE