CVE-2002-1618 JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
HighCVSS 7.2
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc jfs | = 3.1 | No fix listed |
| HP Inc hp-ux | = 10.20 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.04 | No fix listed |
References
- VU#248337 patch third-party-advisory us-government-resource
- HPSBUX0210-223 patch vendor-advisory
- 5979 patch vdb-entry
- hp-onlinejfs-improper-security(10399) vdb-entry
- oval:org.mitre.oval:def:5700 signature vdb-entry