Vulnerabilities > CVE-2001-1564 - Unspecified vulnerability in HP Hp-Ux

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
local
low complexity
hp
NVD
Published: 2001-12-31
Updated: 2017-10-12

Summary

setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space.

Vulnerable Configurations

Part Description Count
OS
Hp
7

Oval

accepted2014-03-24T04:01:39.887-04:00
classvulnerability
contributors
  • nameMichael Wood
    organizationHewlett-Packard
  • nameMichael Wood
    organizationHewlett-Packard
  • nameSushant Kumar Singh
    organizationHewlett-Packard
descriptionsetrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropeed, which could allow local users to cause a denial of service by exhausting available disk space.
familyunix
idoval:org.mitre.oval:def:5159
statusaccepted
submitted2008-07-09T16:48:34.000-04:00
titleHP-UX Running setrlimit(1M), Denial of Service (DoS)
version38

References