Vulnerability Note VU#406406

HP-UX CDE library libDtSvc contains unspecified buffer overflow

Overview

CDE, the default X Windows environment in HP-UX, ships with a libraray called libDtSvc. It has a locally-exploitable buffer overflow in some versions.

I. Description

Please see HP Security Bulletin HPSBUX0401-308 SSRT3492 for more details.

II. Impact

A local user may be able to gain root-level access.

III. Solution

Apply the appropriate vendor patch.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Hewlett-Packard Company	Vulnerable	23-Mar-2004

References

http://ciac.llnl.gov/ciac/bulletins/o-057.shtml
http://www.securityfocus.com/advisories/6237
http://xforce.iss.net/xforce/xfdb/14828
http://www.osvdb.org/displayvuln.php?osvdb_id=16023

Credit

Thanks to the HP IT Resource Center for reporting this vulnerability.

This document was written by Jeffrey S. Havrilla

Other Information

Date Public:	2004-01-14
Date First Published:	2004-03-23
Date Last Updated:	2006-06-13
CERT Advisory:
CVE-ID(s):	CVE-2004-1764
NVD-ID(s):	CVE-2004-1764
US-CERT Technical Alerts:
Metric:	7.12
Document Revision:	3

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader