CVE-2002-1794 Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc ldap-ux integration | = b.02.00 | No fix listed |
| HP Inc ldap-ux integration | = b.03.00 | No fix listed |
| HP Inc hp-ux | = 11.00 | No fix listed |
| HP Inc hp-ux | = 11.11 | No fix listed |
References
- HPSBUX0209-221 patch vendor-advisory
- N-006 government-resource patch third-party-advisory vendor-advisory
- hp-ldapux-pamauthz-bypass(10266) patch vdb-entry
- 5839 patch vdb-entry
- oval:org.mitre.oval:def:5593 signature vdb-entry