Unscored CVE-2001-1256 EUVD-2001-1237GHSA-6fr4-8mj5-5xc5

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/…

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the (1) /tmp/.kmmodreg_lock and (2) /tmp/kmpath.tmp temporary files.

References

oval:org.mitre.oval:def:5628 vdb-entry signature
20010604 yet another sym link followers mailing-list
L-093 third-party-advisory government-resource
2821 vdb-entry
VU#127435 third-party-advisory
http://www.kb.cert.org/vuls/id/TJSL-4Z5Q92
HPSBUX0106-153 vendor-advisory
hpux-kmmodreg-symlink(6656) vdb-entry