HP-UX PHCO_28954 : HP-UX Running shar(1), Local Execution of Arbitrary Code (HPSBUX00304 SSRT3639 rev.2)

high Nessus Plugin ID 16972

Synopsis

The remote HP-UX host is missing a security-related patch.

Description

s700_800 11.00 shar(1) cumulative patch :

shar(1) creates tmp files insecurely.

Solution

Install patch PHCO_28954 or subsequent.

See Also

http://www.nessus.org/u?6072645b

Plugin Details

Severity: High

ID: 16972

File Name: hpux_PHCO_28954.nasl

Version: 1.11

Type: local

Published: 2/16/2005

Updated: 1/11/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:hp:hp-ux

Required KB Items: Host/local_checks_enabled, Host/HP-UX/version, Host/HP-UX/swlist

Patch Publication Date: 3/29/2007

Reference Information

HP: HPSBUX00304, SSRT3639, emr_na-c00910986