CVE-2006-5452

Severity

46%

Complexity

39%

Confidentiality

106%

Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.

Buffer overflow in dtmail on HP Tru64 UNIX 4.0F through 5.1B and HP-UX B.11.00 through B.11.23 allows local users to execute arbitrary code via a long -a (aka attachment) argument.

CVSS 2.0 Base Score 4.6. CVSS Attack Vector: local. CVSS Attack Complexity: low. CVSS Vector: (AV:L/AC:L/Au:N/C:P/I:P/A:P).

Overview

First reported 18 years ago

2006-10-23 17:07:00

Last updated 6 years ago

2018-10-17 21:42:00

Affected Software

HP-UX 11.00

11.00

HP HP-UX 11.4

11.4

HP-UX 11.11

11.11

HP-UX 11i v1.6

11.22

HP Tru64 4.0f

4.0f

HP Tru64 4.0f pk8

4.0f

HP Tru64 4.0g

4.0g

HP Tru64 4.0g pk4

4.0g

HP Tru64 5.0a

5.0a

HP Compaq Tru64 5.1

5.1

HP Tru64 5.1a

5.1a

HP Tru64 5.1a pk6

5.1a

HP Tru64 UNIX 5.1af

5.1af

HP Tru64 UNIX 5.1b pk1

5.1b

HP Tru64 UNIX 5.1b2 pk4

5.1b2

HP Tru64 5.1B3

5.1b3

References

HPSBUX02162

22451

22528

1017083

1017098

Patch

1017099

Patch

http://www.netragard.com/pdfs/research/HP-TRU64-DTMAIL-20060810.txt

Vendor Advisory

HPSBTU02163

20580

ADV-2006-4139

ADV-2006-4140

dtmail-tru64-bo(29644)

oval:org.mitre.oval:def:5175

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.