| Vulnerability Name: | CVE-2004-2693 (CCN-16120) | ||||||||
| Assigned: | 2004-05-11 | ||||||||
| Published: | 2004-05-11 | ||||||||
| Updated: | 2017-10-11 | ||||||||
| Summary: | HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/. | ||||||||
| CVSS v3 Severity: | 5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-264 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2004-2693 Source: HP Type: UNKNOWN SSRT3613 Source: CCN Type: SA11615 HP-UX B6848AB GTK+ Support Libraries Insecure Directory Permissions Source: SECUNIA Type: Vendor Advisory 11615 Source: CCN Type: CIAC Information Bulletin O-143 Gnome Toolkit (GTK+) Support Libraries Vulnerability Source: CCN Type: Hewlett-Packard Web site HP Source: HP Type: UNKNOWN HPSBUX01034 Source: OSVDB Type: UNKNOWN 6120 Source: CCN Type: OSVDB ID: 6120 HP-UX B6848AB GTK+ Support Libraries Insecure Permissions Source: CCN Type: BID-10332 HP B6848AB GTK+ Library Insecure File Permissions Vulnerability Source: XF Type: UNKNOWN hp-gtk-gain-privileges(16120) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:6105 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||