CVE-2002-1513 The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions becaus...
MediumCVSS 4.6
EPSS 0.78%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| compaq tcp-ip services | = 4.2 | No fix listed |
| compaq tcp-ip services | = 5.0a | No fix listed |
| compaq tcp-ip services | = 5.1 | No fix listed |
| compaq tcp-ip services | = 5.3 | No fix listed |
References
- 20021001 [security bulletin] SSRT2371 HP OpenVMS Potential POP server local vulnerability (fwd) mailing-list patch vendor-advisory
- SSRT2371 vendor-advisory
- 20020927 OpenVMS POP server local vulnerability exploit mailing-list patch vendor-advisory
- openvms-pop-gain-privileges(10236) patch vdb-entry vendor-advisory
- 5790 exploit patch vdb-entry vendor-advisory