HP-UX SLSd unauthorized access
Published:		15.02.2007
Source:		BUGTRAQ
SecurityVulns ID:		7239
Type:		remote
Level:		6/10
Description:		It's possible to create any file with attacker-supplied data.

Affected:		HP : HP-UX 10.20
		HP : HP-UX 11.11
CVE:		CVE-2007-0915 (Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request.)

Original document		HP, HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation (15.02.2007)
		IDEFENSE, iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability (15.02.2007)

Discuss:

Read or add your comments to this news (0 comments)