ID CVE-2006-5557
Summary Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
References
Vulnerable Configurations
  • HP-UX 11.00
    cpe:2.3:o:hp:hp-ux:11.00
  • HP HP-UX 11.4
    cpe:2.3:o:hp:hp-ux:11.4
  • HP-UX 11.11
    cpe:2.3:o:hp:hp-ux:11.11
CVSS
Base: 4.6 (as of 30-10-2006 - 09:55)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
exploit-db via4
  • description HP-UX 11i (swmodify) Stack Overflow Local Root Exploit. CVE-2006-5557. Local exploit for hp-ux platform
    file exploits/hp-ux/local/2634.c
    id EDB-ID:2634
    last seen 2016-01-31
    modified 2006-10-24
    platform hp-ux
    port
    published 2006-10-24
    reporter prdelka
    source https://www.exploit-db.com/download/2634/
    title HP-UX 11i swmodify Stack Overflow Local Root Exploit
    type local
  • description HP-UX 11i (swpackage) Stack Overflow Local Root Exploit. CVE-2006-5557. Local exploit for hp-ux platform
    file exploits/hp-ux/local/2633.c
    id EDB-ID:2633
    last seen 2016-01-31
    modified 2006-10-24
    platform hp-ux
    port
    published 2006-10-24
    reporter prdelka
    source https://www.exploit-db.com/download/2633/
    title HP-UX 11i swpackage Stack Overflow Local Root Exploit
    type local
oval via4
accepted 2014-03-24T04:01:39.521-04:00
class vulnerability
contributors
  • name Michael Wood
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
description Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
family unix
id oval:org.mitre.oval:def:5035
status accepted
submitted 2008-07-08T17:01:37.000-04:00
title HP-UX Running Software Distributor Local Elevation of Privilege
version 36
refmap via4
bid
  • 20706
  • 20735
exploit-db
  • 2633
  • 2634
misc http://blogs.23.nu/prdelka/stories/13144/
osvdb
  • 33993
  • 33994
Last major update 07-03-2011 - 21:43
Published 27-10-2006 - 12:07
Last modified 18-10-2017 - 21:29
Back to Top