ID CVE-2006-5558
Summary Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
References
Vulnerable Configurations
  • HP-UX 11.00
    cpe:2.3:o:hp:hp-ux:11.00
  • HP HP-UX 11.4
    cpe:2.3:o:hp:hp-ux:11.4
  • HP-UX 11.11
    cpe:2.3:o:hp:hp-ux:11.11
  • cpe:2.3:o:hp:hp-ux:11.23:-:ia64_64-bit
    cpe:2.3:o:hp:hp-ux:11.23:-:ia64_64-bit
CVSS
Base: 10.0 (as of 30-10-2006 - 10:09)
Impact:
Exploitability:
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
exploit-db via4
description HP-UX 11i (swask) Format String Local Root Exploit. CVE-2006-5558. Local exploit for hp-ux platform
file exploits/hp-ux/local/2635.c
id EDB-ID:2635
last seen 2016-01-31
modified 2006-10-24
platform hp-ux
port
published 2006-10-24
reporter prdelka
source https://www.exploit-db.com/download/2635/
title HP-UX 11i swask Format String Local Root Exploit
type local
oval via4
accepted 2014-03-24T04:01:47.756-04:00
class vulnerability
contributors
  • name Michael Wood
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
  • name Sushant Kumar Singh
    organization Hewlett-Packard
description Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
family unix
id oval:org.mitre.oval:def:5804
status accepted
submitted 2008-07-08T17:01:37.000-04:00
title HP-UX Running Software Distributor Local Elevation of Privilege
version 36
refmap via4
bid 20726
exploit-db 2635
misc http://blogs.23.nu/prdelka/stories/13144/
Last major update 07-03-2011 - 21:43
Published 27-10-2006 - 12:07
Last modified 18-10-2017 - 21:29
Back to Top