Vulnerability Note VU#229867

HP Tru64 UNIX "su" command vulnerable to buffer overflow

Overview

The Hewlett Packard Tru64 "su" command contains a locally exploitable buffer overflow. An exploit for this vulnerability is known to exist and may be circulating.

I. Description

The Hewlett Packard Tru64 operating system contains a command, known as "su," that allows users to assume the privileges of another user. This program is vulnerable to a buffer overflow.

II. Impact

This vulnerability can be exploited by local non-root users on a machine to cause a denial-of-service condition, or assume the privileges of the root user.

III. Solution

Hewlett Packard has issued a patch that corrects this vulnerability. More information can be found here.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett-Packard Company	Vulnerable	12-Aug-2002

References

http://www.securityfocus.com/bid/5272
http://ftp.support.compaq.com/patches/public/Readmes/unix/duv40fb18-c0067403-14947-es-20020730.README

Credit

This document was written by Ian A Finlay.

Other Information

Date Public:	2002-07-19
Date First Published:	2003-03-21
Date Last Updated:	2003-04-15
CERT Advisory:
CVE-ID(s):	CAN-2002-0816
NVD-ID(s):	CAN-2002-0816
US-CERT Technical Alerts:
Severity Metric:	18.75
Document Revision:	14

If you have feedback, comments, or additional information about this vulnerability, please send us email.