CVE-2007-1993 Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to proced...
HighCVSS 9.3
EPSS 8.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to execute arbitrary code by sending "a call to procedure 5, followed by a crafted payload to procedure 2."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc hp-ux | = b.11.00 | No fix listed |
| HP Inc hp-ux | = b.11.11 | No fix listed |
| HP Inc hp-ux | = b.11.23 | No fix listed |
References
- HPSBUX02203 vendor-advisory
- 20070412 Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability third-party-advisory
- 24855 third-party-advisory vendor-advisory
- 23401 vdb-entry
- 1017893 vdb-entry
- ADV-2007-1343 vdb-entry vendor-advisory
- hpux-pfs-privilege-escalation(33567) vdb-entry
- oval:org.mitre.oval:def:5751 signature vdb-entry