HP-UX PHCO_25110 : HPSBUX0111-176 Sec. Vulnerability in rlpdaemon (rev.1)

critical Nessus Plugin ID 16958

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.00 lpspool subsystem cumulative patch :

An rlpdaemon logic flaw vulnerability has been reported to us that may allow a remote or local attacker to execute arbitrary code with superuser privilege.

Solution

Install patch PHCO_25110 or subsequent.

Plugin Details

Severity: Critical

ID: 16958

File Name: hpux_PHCO_25110.nasl

Version: 1.14

Type: local

Family: HP-UX Local Security Checks

Published: 2/16/2005

Updated: 1/11/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Exploit Ease: No known exploits are available

Patch Publication Date: 11/21/2001

Vulnerability Publication Date: 11/20/2001

Reference Information

CVE: CVE-2001-0817

BID: 3561

HP: HPSBUX0111

Detections

Analytics