Oval Definition:	oval:org.mitre.oval:def:18898
Revision Date: 2015-04-20 Version: 30 Title: HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS) Description: envvars (aka envvars-std) in the Apache HTTP Server before 2.4.2 places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse DSO in the current working directory during execution of apachectl. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-0883 Platform(s): HP-UX 11 Product(s): Definition Synopsis Criteria meets HP Security Bulletin HPSBUX02791 HP-UX B.11.11 AND filesets tests hpuxwsAPACHE.APACHE version is less than B.2.0.64.04 OR hpuxwsAPACHE.APACHE2 version is less than B.2.0.64.04 OR hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.64.04 OR hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.64.04 OR hpuxwsAPACHE.MOD_JK version is less than B.2.0.64.04 OR hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.64.04 OR hpuxwsAPACHE.MOD_PERL version is less than B.2.0.64.04 OR hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.64.04 OR hpuxwsAPACHE.PHP version is less than B.2.0.64.04 OR hpuxwsAPACHE.PHP2 version is less than B.2.0.64.04 OR hpuxwsAPACHE.WEBPROXY version is less than B.2.0.64.04 OR Criteria meets HP Security Bulletin HPSBUX02791 HP-UX B.11.23 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.13 OR hpuxws22APCH32.APACHE2 version is less than B.2.2.15.13 OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.13 OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_JK version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.13 OR hpuxws22APCH32.PHP version is less than B.2.2.15.13 OR hpuxws22APCH32.PHP2 version is less than B.2.2.15.13 OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.13 OR hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.13 OR hpuxws22APACHE.APACHE version is less than B.2.2.15.13 OR hpuxws22APACHE.APACHE2 version is less than B.2.2.15.13 OR hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.13 OR hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_JK version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.13 OR hpuxws22APACHE.PHP version is less than B.2.2.15.13 OR hpuxws22APACHE.PHP2 version is less than B.2.2.15.13 OR hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.13 OR hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.13 OR Criteria meets HP Security Bulletin HPSBUX02791 HP-UX B.11.31 AND filesets tests hpuxws22APCH32.APACHE version is less than B.2.2.15.13 OR hpuxws22APCH32.APACHE2 version is less than B.2.2.15.13 OR hpuxws22APCH32.AUTH_LDAP version is less than B.2.2.15.13 OR hpuxws22APCH32.AUTH_LDAP2 version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_JK version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_JK2 version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_PERL version is less than B.2.2.15.13 OR hpuxws22APCH32.MOD_PERL2 version is less than B.2.2.15.13 OR hpuxws22APCH32.PHP version is less than B.2.2.15.13 OR hpuxws22APCH32.PHP2 version is less than B.2.2.15.13 OR hpuxws22APCH32.WEBPROXY version is less than B.2.2.15.13 OR hpuxws22APCH32.WEBPROXY2 version is less than B.2.2.15.13 OR hpuxws22APACHE.APACHE version is less than B.2.2.15.13 OR hpuxws22APACHE.APACHE2 version is less than B.2.2.15.13 OR hpuxws22APACHE.AUTH_LDAP version is less than B.2.2.15.13 OR hpuxws22APACHE.AUTH_LDAP2 version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_JK version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_JK2 version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_PERL version is less than B.2.2.15.13 OR hpuxws22APACHE.MOD_PERL2 version is less than B.2.2.15.13 OR hpuxws22APACHE.PHP version is less than B.2.2.15.13 OR hpuxws22APACHE.PHP2 version is less than B.2.2.15.13 OR hpuxws22APACHE.WEBPROXY version is less than B.2.2.15.13 OR hpuxws22APACHE.WEBPROXY2 version is less than B.2.2.15.13
BACK