OSVDB ID: 9638

Title: HP-UX lp Subsystem Multiple Overflow DoS

Info

Disclosure

Aug 28, 2002

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Multiple buffer overflows exists in HP-UX. The LP subsystem is vulnerable to several unspecified overflows. With a specially crafted request, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Solution: Patch / RCS, Upgrade
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, HP has released a patch to address this vulnerability.

Products

Hewlett-Packard Development Company, L.P.

HP-UX

10.20
11.00
11.11

References

Credit

  • Hdm - Browser fun


Direct URL: http://osvdb.org/9638