Oval Definition:
oval:org.mitre.oval:def:4897
Revision Date
:
2014-03-24
Version
:
21
Title
:
HP-UX LP subsystem, Local Denial of Service (DoS)
Description
:
Buffer overflow in rwrite for HP-UX 11.0 could allow local users to execute arbitrary code via a long argument. NOTE: the vendor was unable to reproduce the problem on a system that had been patched for an lp vulnerability (CVE-2002-1473).
Family
:
unix
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2003-1461
Platform(s)
:
HP-UX 11
Product(s)
:
Definition Synopsis
Criteria meets HP Security Bulletin HPSBUX00213
HP-UX B.11.11
AND
PrinterMgmt.LP-SPOOL is installed
AND
NOT
Patch PHCO_27020 is installed
OR
Criteria meets HP Security Bulletin HPSBUX00213
HP Release B.11.00
AND
PrinterMgmt.LP-SPOOL is installed
AND
NOT
Patch PHCO_27132 is installed
BACK