Vulnerabilities > CVE-2006-0436 - Unspecified vulnerability in HP Hp-Ux 11.00/11.11/11.4

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
hp
nessus
NVD
Published: 2006-01-26
Updated: 2017-10-11

Summary

Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.

Vulnerable Configurations

Part Description Count
OS
Hp
3

Nessus

  • NASL familyHP-UX Local Security Checks
    NASL idHPUX_PHCO_32280.NASL
    descriptions700_800 11.04 (VVOS) libpam, libpam_unix cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX systems where the vulnerability may be exploited to allow a local user to increase privilege. (HPSBUX02091 SSRT061099) - A potential vulnerability has been identified with the HP-UX newgrp(1) command that may allow authorized users to elevate privileges. (HPSBUX01102 SSRT4687)
    last seen2020-06-01
    modified2020-06-02
    plugin id16962
    published2005-02-16
    reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/16962
    titleHP-UX PHCO_32280 : s700_800 11.04 (VVOS) libpam, libpam_unix cumulative patch
  • NASL familyHP-UX Local Security Checks
    NASL idHPUX_PHCO_29249.NASL
    descriptions700_800 11.00 libpam and libpam_unix cumulative patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP-UX systems where the vulnerability may be exploited to allow a local user to increase privilege. (HPSBUX02091 SSRT061099) - A potential security vulnerability has been identified with HP-UX trusted systems where the vulnerability may be exploited to allow remote unauthorized access. (HPSBUX01165 SSRT5899)
    last seen2020-06-01
    modified2020-06-02
    plugin id18394
    published2005-05-30
    reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/18394
    titleHP-UX PHCO_29249 : s700_800 11.00 libpam and libpam_unix cumulative patch
  • NASL familyHP-UX Local Security Checks
    NASL idHPUX_PHCO_30402.NASL
    descriptions700_800 11.11 libpam_unix cumulative patch : A potential security vulnerability has been identified with HP-UX systems where the vulnerability may be exploited to allow a local user to increase privilege.
    last seen2020-06-01
    modified2020-06-02
    plugin id20830
    published2006-02-01
    reporterThis script is Copyright (C) 2006-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/20830
    titleHP-UX PHCO_30402 : HP-UX Local Increased Privilege (HPSBUX02091 SSRT061099 rev.2)

Oval

  • accepted2011-05-09T04:01:10.925-04:00
    classvulnerability
    contributors
    • nameRobert L. Hollis
      organizationThreatGuard, Inc.
    • nameTodd Dolinsky
      organizationOpsware, Inc.
    • nameShane Shaffer
      organizationG2, Inc.
    descriptionUnspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.
    familyunix
    idoval:org.mitre.oval:def:1453
    statusaccepted
    submitted2006-01-30T07:20:00.000-04:00
    titleHP-UX Shared Library Privilege Escalation Vulnerability (B.11.11)
    version38
  • accepted2011-05-09T04:01:14.689-04:00
    classvulnerability
    contributors
    • nameRobert L. Hollis
      organizationThreatGuard, Inc.
    • nameTodd Dolinsky
      organizationOpsware, Inc.
    • nameShane Shaffer
      organizationG2, Inc.
    descriptionUnspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.
    familyunix
    idoval:org.mitre.oval:def:1577
    statusaccepted
    submitted2006-01-30T07:20:00.000-04:00
    titleHP-UX Shared Library Privilege Escalation Vulnerability (B.11.00)
    version38
  • accepted2014-03-24T04:00:39.917-04:00
    classvulnerability
    contributors
    • nameRobert L. Hollis
      organizationThreatGuard, Inc.
    • nameTodd Dolinsky
      organizationOpsware, Inc.
    • nameMichael Wood
      organizationHewlett-Packard
    • nameSushant Kumar Singh
      organizationHewlett-Packard
    descriptionUnspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.
    familyunix
    idoval:org.mitre.oval:def:1586
    statusaccepted
    submitted2006-01-30T07:20:00.000-04:00
    titleHP-UX Local Increased Privilege
    version41

References