CVE-2011-4834

 

Published at: - 15-12-2011 04:57

Last modified: - 26-09-2022 12:26

Total changes: - 2

Description

The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt.

Common Vulnerability Scoring System (CVSS)

AV:L/AC:L/Au:N/C:P/I:P/A:P

 

Verification logic

 

Reference

• 47040-Vendor Advisory
• http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html
• hp-alm-symlink(71698)-
• 20111208 0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11-

 

Keywords

NVD

 

CVE-2011-4834

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures