Vulnerabilities > CVE-2005-3277 - Unspecified vulnerability in HP Hp-Ux 10.20/11.00/11.11

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
hp
critical
exploit available
NVD
Published: 2005-10-21
Updated: 2008-09-05

Summary

The LPD service in HP-UX 10.20 11.11 (11i) and earlier allows remote attackers to execute arbitrary code via shell metacharacters ("`" or single backquote) in a request that is not properly handled when an error occurs, as demonstrated by killing the connection, a different vulnerability than CVE-2002-1473.

Vulnerable Configurations

Part Description Count
OS
Hp
3

Exploit-Db

descriptionHP-UX <= 11.11 lpd Remote Command Execution Exploit (meta). CVE-2005-3277. Remote exploit for hp-ux platform
idEDB-ID:1261
last seen2016-01-31
modified2005-10-19
published2005-10-19
reporterH D Moore
sourcehttps://www.exploit-db.com/download/1261/
titleHP-UX <= 11.11 lpd Remote Command Execution Exploit meta

References