Oval Definition:
oval:org.cisecurity:def:394
Revision Date
:
2016-03-11
Version
:
15
Title
:
HP-UX pppoec, local elevation of privilege
Description
:
Unspecified vulnerability in pppoec in HP HP-UX 11iv2 and 11iv3 allows local users to gain privileges by leveraging setuid permissions.
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2015-2126
Platform(s)
:
HP-UX 11
Product(s)
:
Definition Synopsis
Criteria meets HP Security Bulletin HPSBUX03359
HP-UX B.11.31
AND
filesets tests
Networking.PPP2-KRN is installed
OR
Networking.PPP2-RUN is installed
AND
NOT
Patch PHNE_44295 is installed
OR
Criteria meets HP Security Bulletin HPSBUX03359
HP-UX B.11.23
AND
filesets tests
Networking.NET2-KRN is installed
OR
Networking.PPP2-RUN is installed
OR
Networking.PPP-RUN is installed
OR
Networking.NW-ENG-A-MAN is installed
AND
NOT
Patch PHNE_44296 is installed
BACK