Description
Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- HP-UX 11i - 'swpackage' Local Stack Overflow / Local Privilege Escalation EDB-2633 · local · Oct 24, 2006 · verified
- HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation EDB-2634 · local · Oct 24, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 33993 vdb-entry
- 20706 vdb-entry
- 2633 exploit
- http://blogs.23.nu/prdelka/stories/13144/
- 20735 vdb-entry
- 33994 vdb-entry
- oval:org.mitre.oval:def:5035 vdb-entry signature
- 2634 exploit